/api/v1/environments/{id}/snapshots/{snapshotId}/restore

Restores the snapshot into a (possibly new) carrier while keeping the stable

environment id; epoch is bumped and exec handles are cleared, so pre-restore

execIds answer 404. Requires stopped (409 otherwise) and snapshot ownership;

process liveness is not preserved — template services are re-probed after restore.

Snapshot production uses the provider's production snapshot path (Fix-R5c); see the

implementation-deviations section of the API doc. Operator face: principal sessions

are denied 403 / 404 not_owned.