Function read_exact_at 

pub fn read_exact_at(f: &File, buf: &mut [u8], offset: u64) -> Result<()>

2026-09-25: Fill buf from offset. A zero-byte read before buf is full is an UnexpectedEof error, so the tail of buf is never left stale.