The commit's hydrated snapshot, so a metadata read dereferences a
doc.ref into content. undefined → identity-only resolution (content
reads resolve null). Required (not optional) so a new call site can't
silently drop it — pass undefined deliberately.
Shell-supplied clock reading (ISO) backing guard
$nowreads.