A single-function run whose process tree could not be proven stopped released its run slot immediately, so the next queued run started while the old tree might still run, and repeated unproven stops bypassed the bound. The retained run now carries its slot, and close releases it only after a retried stop is proven. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>