Bound remote control object reads

docs/internal/stage-publish.md

@@ -51,6 +51,10 @@ Exact remote placement and the operator workflow belong in
 - rechecks remote lock state immediately before the pointer update. A newly
   committed lock aborts selection, leaving any uploaded immutable attempt
   unselected.
+- reads the mutable remote lock document through a direct limit-plus-one read
+  capped by `MaxRemoteLockStoreBytes` (1 MiB), retaining the generation returned
+  with the opened body for conditional updates. Oversized lock documents fail
+  before YAML decoding; published artifact payloads do not use this limit.
 
 ## Metadata Signals