One Child Per Live Session
A bounded native supervisor keeps engine children. Runtime identity is immutable for the life of a child. Queue, draft, attachment, permission, replay, and dock state belong to the session, not to a global heap. Live switching is a projection change. Suspension is idle-only. A typed child-limit refusal is a fact the window can show, not a crash the operator has to decode.
Crash recovery is isolated. Killing one child leaves its sibling and the control plane. The dead child's notebook still has its last durable step. Restart tails the record. A supervisor that 'helpfully' re-runs an unresolved tool call would violate the record track from the GUI side.
What This Quest Will Not Teach
Signing, provisioning, notarization, and the Swift package graph are swift-quest. You are here to see why a Mac face does not need a port, why a web view is locked, why the pipe is versioned, and why a supervisor is not a second engine. The Apple craft has a home. This page is the Firebrand side of the glass. When a review asks how to notarize the bundle, the honest answer is a pointer to that neighbor — not a half-lesson that will rot the first time Apple changes a flag.