BOUNDED REVIEW BATCHES PRESERVE A CLEAN RESUMABLE PAUSE

The private conveyor now accepts --limit N for an operator-controlled batch boundary. It seals only the next contiguous entries, exits cleanly after the requested positive count, and reconstructs the following ordinal on resume; invalid non-positive limits fail closed.

Raw traces, ROM material, local paths, and personal data are not part of this public record.