The sponsor's validated roster trust state (founder, member keys, revocations), which the new device adopts before its first sync instead of trusting whichever roster reaches it first.
final List<int> rosterPins;