pub fn check_schema_version(conn: &Connection) -> Result<(), String>Expand description
Refuses to touch a vault written by a newer build.
Refuse-with-a-message beats corrupt-on-round-trip: an old binary that reads a future document, drops the fields it does not know and writes it back has silently destroyed data, which is this project’s worst bug class.