Verify and Salvage's implementation are described somewhat in code comments, but could use some documentation in the new Architecture Guide.  This has purposely been left out of the scope of PM-1529, being deemed important but not urgent.