○
Planned This feature is planned but not yet implemented.
OWED-REFUSAL: a store write reachable under a spawn context must refuse — "this store's owner is the pump context; cross-thread mutation routes through a channel to the owner" (ingress-ring semantics). The check is context-coloring propagated through flow/subflow reachability — the same traversal obligation scopes already ride. TODAY the surface can't spell it: spawned work_fns are host Zig; the enforcement fires when generated mutator units are invoked from a spawned context, so this pin lands with the coloring pass. Posture per the doctrine: unknown/mixed context = refuse, never assume-owner — the unanalyzed case fails loud.