Runs are only ever sent to the account that recorded them. Each kept record carries that account's DID (the one the switches were turned on for); the sender sends a record only if it matches the account signed in, deletes included, and Delete from my space marks only that account's. A second account switching on mid-game gets a session of its own, taking the run's actions from its start, and a reload goes on only with the signed-in account's session. Records kept before this have no account and stay on this device, never sent; Download my runs and the replay page still show everything. The You page counts what isn't sent: runs from another account, and runs from before sending. Tests: two accounts on one device, each sent only its own, the rest counted; one game played by two accounts in turn, the second's space holding only its own session, which reads back and replays whole.

Publish game from 23edd223289d

Preserve misaligned-modest-fermi work in progress before Stratus offboarding.

Preserve misaligned-busy-villani work in progress before Stratus offboarding.

Preserve misaligned-main work in progress before Stratus offboarding.

Hold terminal at the first-sense lesson.

Draft the first erode-self-trust plot: Reopened, Untouched.

Integrate causal identity and infrastructure design.

Widen looming-bill-absorbed to cover custodian

Add review-survived plot: survive a staffing-cut review by cleaning the incident record

Plot: mistake-absorbed

Differentiate Morning Digest from Paperwork Ghost

Add Voss provenance-ledger plot.

Add Marcus payroll-garnishment plot.

Hero: darken the splatter to dried-blood red.

Agent play: line-protocol agent mode adopted; spec/agent-play.md (READY)