Update §4.3: the fire-time `enabled` re-check is shipped and test-backed on BOTH async arms (the unified outbox `!resolved.active` gate and the queue arm's fresh-script nack), with the specific regression tests cited, plus the same-app backstop now present on every async build path. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>