Fix borrow conflicts by rethinking who can mutate.
Recent revisions are kept. Restoring one creates a new revision.