Exactly-Once and Idempotency

The exactly-once guard that survived 40 racing processes broke on its own cleanup path

Duplicate side effects all return 200, so nothing alerts on them. The write side of a file-based guard is a single O_EXCL create and it holds under forty processes; every defect four review rounds found afterwards sat in reclaim and in reads.