Keep only live announce ids on the subscriber side, bounded, so a peer cycling a route costs nothing; advertise a pushed stream in broadcast_origins only as its segments validate, never on the announcement alone; run the role loops on the session context whichever caller wins the once; take the first lease check synchronously so a first segment this node records is not lost; contend for transcoding only on an origin node (local ingest or push receipt), since peers take renditions from the origin; and wire the advertised MoQ URL before any HTTP server builds its handler.