A linearizable read (ReadOnlySafe, §6.3). Instead of serving a read from astale lease, the leader confirms its commit index with a fresh quorum roundtrip; only once a quorum acknowledges does the read become safe. We ask for aread, drive the Ready / Advance loop by hand so we can see the confirmingReadState surface on the leader's Ready, and report that the read is safe.