A memory server may need two write paths, not one

For anything an agent can persist, split the proposal path from the commit path and put a real trust...