The product need is simple: repaired memory should not resume blindly.
A resume gate reads rollback evidence and decides what happens next. It should not rely on a raw prompt diff or a vague safety statement; it should show the repaired boundary and the next allowed action.