carlos / platform Public

Concurrent Watch and SIGHUP reloads could read route state in one order and install route maps, probers and activator keep sets in the reverse order. This change serializes the existing read-through-install sequence and keeps reload callbacks outside the lock.

Candidate165472b8 follows actual Opus design C1-C8. Focused normal/race tests pass; full edge normal/race passed before a final comment clarification, then final focused tests and all five required mutant assertions passed. Original Unix socket path-length fixture failures are retained. Actual code/composition review and complete changed-tip host-exception validation are running; this is a source checkpoint, not acceptance. LIVE OFF; no provider/deployment/main merge or billing activation.