Invariant checks
Every rule the store is supposed to hold — seed integrity, the FIFO stock engine, locks, balances, the release paths, the expiry sweep and the dispenser head. Grouped in the order they run, because the later groups depend on the mutations the earlier ones make.
A safe run snapshots the store, runs the whole suite, then writes the snapshot back — your data is untouched. A live run leaves the mutations in place, which is the only way to inspect the state a failing check produced.