openai/gpt-chat-latest → A (5:1)

Side A introduces substantial infrastructure: a new RocksDB-backed `durable` workspace crate, moves raw Reddit entity JSON out of the in-memory tree into an `EntityStore`, and replaces startup loading with line-by-line event log replay to reduce memory usage while updating reducers and tests accordingly. Side B improves security by making vote authentication fail closed, adding Secure-cookie handling, redirect sanitization, and pinning a dependency revision, but these are comparatively localized hardening changes rather than a broad architectural improvement.