App-payload witnesses that decrypt on candidate states in the branch.
The epoch where the branch diverged from retained canonical state.
Caller-supplied identifier for the branch (not used in scoring).
SHA-256 (32 bytes) of the branch's tip commit MLS message bytes.
The epoch reached after replaying the branch's valid commits.
A candidate branch produced by replaying commits from a retained state.