A CANONICAL ANSWER · FROM THE VINDEX KNOWLEDGE GRAPH
A crash never fakes a container
The write order is deliberate: segments first, index.json last. A crash midway leaves a directory that never claimed to be a container — rather than one that claims to be and is missing its banks. The root is written only when everything it speaks for already exists.