STRICT
Refuse to open when any byte of any log is unreadable, torn tail included.
For the case where an incomplete recovery must be an operator's decision rather than the engine's: forensics, format-compatibility testing, or a deployment that would rather stop than come up having quietly dropped the last commit it never promised.