# Persistence

project_file.c implements bounded version-2 project metadata loading (including explicit version-1 migration) and atomic
temporary-file/fsync/rename saving in C. Loading validates a candidate before
replacing the existing model. All I/O is control-thread only.
See docs/PROJECT_FORMAT.md for the schema, limits and durability guarantees.