Build immutable revocation checkpoints from frozen current-index views using bounded external sorting and canonical multi-pass merging. Keep the transition log authoritative while preserving exact historical revision binding, atomic checkpoint publication, and bounded resources.