bootstrap

A ledger seeded with root supply for one mint act: each (replica, amount) in mint becomes a MintRecord credited to that replica, keyed by a MintId unique to this act.

nonce identifies the mint act and MUST be distinct across independent acts (a fresh value per commit; a sequence number, a Raft log index, a UUID). This is load-bearing, not decoration: mints are keyed so that two distinct acts crediting the same holder union rather than max-collide into one lost mint (design fix 4). The same act observed on two peers carries the same nonce, so it converges to one entry. No edges yet — the topology is grown by the mutators (a later phase). Every amount must be non-negative.

root names the tree this supply belongs to, and every MintRecord carries it (#1751), so the supply is creditable at root and nowhere else. A ledger should still have exactly one bootstrap — merging two leaves two rootless groups, each holding its own supply, which validate reports as LedgerConflict.MultipleRoots — but the merge no longer double-counts either one. See the "One root per ledger" section of the class KDoc.