fn save_peers(kept: &Peers) -> StringExpand description
Written whole beside its place, then renamed over it (share::write_atomically):
a crash in mid-write never leaves half of it, which read as nothing would
lose the newest copies kept, the openings read and the off and forgotten
marks (final review of 15 October 2026).