- • Tomo owns reducer transitions
- • Codex owns session, task, turn, and step
- • OMP owns outer queue and inner loop
- • Python rechecks authority for every callback
- • Model and tool clients stay outside controllers
- • Journal and terminal settlement remain shared
- • One immutable admission per run
- • Runtime-neutral events and checkpoints
- • Controller changes never change member authority