Development record

commands/embark.md:95-97 says the plan is judged again 'under the target's ledger and intent locks', but the write also takes the spec store's lock (internal/core/lifeboat/embark.go:102-114; 03-embark.md:86-89), so the counterpart a pointer would lean on is the less complete copy.