Restore the paired peer's method, path, and body capture. Composition tests now assert both requests exactly instead of checking only request counts and header names, which could miss bridge changes to the request target or content. Make observer publication and loading share one validator. Publication now rejects credential-instance mismatches and unsafe ingest paths before persistence or activation, preventing state that works only until restart. Walk directory components through no-follow descriptors so an ancestor swap cannot redirect creation or chmod. Only unlink a temporary pathname while the current write still owns it, preserving pre-existing files on exclusive-create collisions. Assert exact registered-auth header values, and route test and production observer persistence through one durable-write helper.