The plain OP_REQ_IMPORT + TryReserveForImport path already delivers
race-free exclusive access for every observable feature; the lease
two-phase commit (OP_REQ_IMPORT_EXT, control lease frames,
serverImportLease) only added identity-replacement detection and
pre-import busy advertisement, neither of which is asserted by any
feature test.
TryReserveForImport now runs as a single critical section under
inventoryAccess, closing the TOCTOU window the LeaseIdentity recheck
used to guard. Export interface loses LeaseIdentity/LeaseCheck.
controlPingLoop writes directly via writeControlMessage, dropping the
clientControlSession holder and the controlSession/controlAccess fields
on ClientService. Control protocol drops the ImportLease capability
bit; controlExtensionCapabilities is now PayloadFrames | DeviceStateV2.
世界
8c5996c6bc