Binds the registry to one file.
Filesystem the file lives on.
Absolute path of the refused-token file.
Returns what the file says about refused tokens, across every entry.
No file reads as no refusals. A damaged file reads as whatever valid digests it still holds, with `isIntact` false so the caller can warn.
The view, or why the file could not be read.
Records a refused digest as the entry's newest, merging it into what is stored.
A file that could not be read is never replaced, and a file that is not intact is set aside first. An intact file whose newest digest for the entry is this one is left as it is.
Opaque key identifying one bank account.
Digest of the token; never the token itself.
Whether the file was replaced, or why it was not.
Deletes staged files an earlier run was killed before cleaning up.
How many were removed, or why the directory could not be read.
Refused long-term token digests, kept beside the token file.