[coneilen]

Summary

Fix the C8R real-zmx normal-target preflight race where an owned short-lived process exited after worker journal publication but before the supervisor could retain its handle. The supervisor now defers only that exact typed/absent-metadata state to the worker's final kernel-exit and EOF/file-closure proof.

Changes

• Classify the exact initial handle-adoption race without treating missing evidence as success.
• Keep foreign, live, stale/reused, and partially classified process identities fail-closed.
• Add a focused three-case real-zmx lifecycle entry point and real final-binding negatives for missing, foreign, stale, and partial records.
• Document that deferred journal generations still require the complete numbered final journal and cleanup binding.

Test plan

RED: pwsh Tools\windows\Tests\UiCaptureDriver.Tests.ps1 -ScratchRoot C:\x9 -RequireRealSeed -RealSeedContractOnly -> 3 executed, 2 passed; normal failed because the journal adoption decision helper was missing
GREEN: pwsh Tools\windows\Tests\UiCaptureDriver.Tests.ps1 -ScratchRoot C:\m7 -RequireRealSeed -RealSeedContractOnly -> 3 executed, 3 passed, 0 failed
REGRESSION: pwsh Tools\windows\Tests\UiCaptureDriver.Tests.ps1 -ScratchRoot C:\a6 -RequireRealSeed -> 185 executed, 185 passed, 0 failed, 0 skipped

• pwsh -NoProfile -File Tools\windows\Tests\ValidationRunner.Tests.ps1 -> PASS; UiScenario 166/166 and UiCaptureDriver 182/182 with zero skips.
• pwsh -NoProfile -File Tools\windows\validate.ps1 -Task hardening -> PASS; deterministic repeated runs 3/3.
• PowerShell parser checks for both changed scripts -> PASS.
• git diff --check and git ls-files --eol for all changed files -> PASS; LF retained.
• pwsh -NoProfile -File Tools\tdd\Tests\TddEvidence.Tests.ps1 -> PASS.
• No C8R capture was launched and no capture lease was requested or consumed.

Checklist

• I have read the Contributing Guidelines
• I have signed off my commits (git commit -s) per the DCO
• Tests pass locally (make test)
• Code follows the existing style (make check)
• I added the test/contract before the implementation and observed the intended RED failure