- a second load_plugin_module caller while the first is mid-exec must get the fully executed module, never the published shell - a persistence-isolated fork (no session DB, no memory manager) skips the checkpoint gate; a durable agent still fails closed Co-authored-by: Albert.Zhou <57474+albert748@users.noreply.github.com> Co-authored-by: stephane <stephane@fastmail.com> Co-authored-by: Kyzcreig <9063726+Kyzcreig@users.noreply.github.com> Co-authored-by: Turgut Kural <58116817+TurgutKural@users.noreply.github.com>