- Callback API: AtomicWrite(logger, targetPath, func(tmp *os.File) error) - Deterministic .yj-tmp suffix for orphan cleanup - Permission preservation (stat target, chmod temp before rename) - Cross-device rejection via ErrCrossDevice sentinel - Orphan cleanup on startup of each write operation - Sync for durability before rename