---
status: accepted
---

# Accepted deliveries prove turn liveness or the endpoint closes

An accepted listener delivery on an idle session must enter an agent turn within the liveness deadline. The extension arms a watchdog whenever accepted custody coexists with OMP-reported idleness; a real turn of any origin consumes pending envelopes through the context hook and resets it, and busy sessions never age toward the deadline. On expiry the extension self-heals by force-resubmitting the stranded deliveries (a per-item submission epoch invalidates hung in-flight submissions so they cannot wedge recovery), then surfaces the degraded-comms rail, and on continued deafness fails closed: it releases pending custody, ends the SPT session, and shuts down the hosted TUI so the endpoint is visibly offline rather than silently deaf while ONLINE. This narrows ADR-0010's never-stop-local-work doctrine deliberately: the arming condition proves no local turn is running, and issue #10 showed the daemon-restart autostart replay can produce sessions whose healthy-looking bring-up (bind, token, listener) hides permanently dead turn delivery — a state the published launch contract gives the adapter no way to detect at spawn, since replay is indistinguishable from any other daemon-driven launch. Detecting the replay path was rejected as impossible from the public surface; a bring-up probe turn was rejected because it spends model tokens on every healthy spawn while the watchdog acts only when real custody is at stake; unbounded resubmission without closure was rejected because it preserves the silent black hole the invariant exists to eliminate.