Terminal installed now publishes at exactly 3 top-level installers, only after the readiness proof reports ready. This removes premature publication that marked llama.cpp installed before the model existed and parakeet installed before the Vulkan binary and model existed. All five install entry paths now converge on the nonblocking per-provider lease. This deletes parakeet's hand-rolled 1-hour blocking install lock and the supervisor's separate single-slot bootstrap bookkeeping. Interrupted classification is lease-based, so one process can no longer mark another process's live install failed. get_state() is read-only. Readiness consumers move to the typed outcome. Only missing-or-mismatched may initiate reacquisition, while proof-unavailable reports and preserves. providers.bundled no longer carries operational state. vulkan_device_index moves to providers.local as owner configuration, and progress coalescing moves into the status owner. The numbered migration, maint opt-ins, and architecture gate follow in the next commit within this lode.