> StartupMultiXact() didn't need changing, I thought, but I will review further.
Good suggestion.
On review, StartupMultiXact() could also suffer similar error to the clog failure. This was caused *because* MultiXact is not maintained by recovery, which I had thought meant it was protected from such failure.