- none-returning client counts as success (sentinel contract) - pending buffer drops oldest past the turn cap and the byte cap - the shutdown interleaving test now pre-seeds a pending turn so the no-resend assert discriminates on content, not timing: with the lock removed it fails on assert 2 == 1 (duplicate send), verified by mutation