OptionalonUnverifiableCommit?: "reject" | "retry"OptionalrequiredIds?: readonly number[]The PARENT epoch's required app-component ids
(requiredComponentIdsOf), used by the commit branch to judge
AppDataUpdate removal legality. Defaults to [], which reproduces the
pre-CR-01 behaviour of not enforcing the required-component removal rule.
Build an incoming-message callback that enforces
refs/marmot/protocol-core/group-messaging.md"admin-only commits".Every Add — whether committed or proposed standalone — is validated before apply with the same core validator (validateAddProposalAccountIdentityProofs) that
proposeInviteUser(the invite seam) and the post-apply tree-diff adapter (src/core/components/integrity.tsvalidateCommitAccountIdentityProofs) use, so a bad Add cannot reach the queued-proposal or applied-tree state through this callback regardless of which of the twoIncomingMessageCallbackkinds it arrives as (D-08/D-09).