The View cannot write directly. The trusted shell will commit only this exact, version-guarded change.