### test procedure
# fixture: existing nested vault with custom configuration and a pre-command file snapshot
$ find "$FIXTURE_VAULT" -type f -print0 | sort -z | xargs -0 shasum -a 256

$ swift run banal vault --vault "$FIXTURE_VAULT"
$ swift run banal vault --vault "$FIXTURE_VAULT" --json
$ swift run banal notes --vault "$FIXTURE_VAULT"
$ swift run banal notes --vault "$FIXTURE_VAULT" --json
$ swift run banal show '<note-id>' --vault "$FIXTURE_VAULT"
$ swift run banal show '<note-id>' --vault "$FIXTURE_VAULT" --json
$ swift run banal doctor --vault "$FIXTURE_VAULT"
$ swift run banal doctor --vault "$FIXTURE_VAULT" --json

$ find "$FIXTURE_VAULT" -type f -print0 | sort -z | xargs -0 shasum -a 256
# expected: every inspection command succeeds and the before/after snapshots match byte-for-byte.

### execution output
# all eight invocations exited 1 during Swift compilation; no inspection command reached application execution.
Building for debugging...
error: emit-module command failed with exit code 1
/workspaces/repo/Sources/BANALCore/Assets/AssetManager.swift:2:8: error: no such module 'UniformTypeIdentifiers'
  1 | import Foundation
  2 | import UniformTypeIdentifiers
    |        `- error: no such module 'UniformTypeIdentifiers'
# pre/post fixture comparison: fixture unchanged because the CLI did not run; read-only behavior was therefore not runtime-observed.

### environment evidence
Swift version 6.1.2 (swift-6.1.2-RELEASE)
Target: aarch64-unknown-linux-gnu
# workbench: BANAL is a native macOS notes app; the Linux container cannot run Apple frameworks or the GUI.
# workbench instruction: run swift run banal-cli on macOS 14+ with Xcode 16+.

### code-path evidence
# BanalCLI vault, notes, show, and doctor all open a NoteStore through openStore.
# NoteStore.open unconditionally calls VaultBootstrap.prepare before loading notes.
# VaultBootstrap.prepare creates assets and .banal directories, writes .banal/config.json when absent, and writes Welcome.md when no top-level note exists.
# Therefore a valid existing vault can be mutated by read-only inspection commands once the native macOS runtime is available.
# The PR describes banal as read-mostly and says it never creates or changes notes; the reachable bootstrap call violates that contract.
# targeted fix: provide inspection commands a non-bootstrapping open path that loads existing metadata without calling VaultBootstrap.prepare.

### final result
# final result: REV-3 failed - runtime reproduction was blocked by the unavailable Linux Apple SDK, but source evidence confirms the read-only inspection path can create filesystem entries or files in an existing vault.