Treat a run as the live health owner only after its fresh reset is durable. Stop startup with distinct guidance when that reset cannot be saved, so status and doctor never replay linked state from a prior run.