[cadence a688ed06469433f8] The registration recheck does not bind the subsequent name-only removal to the entry that was checked. #251

Raised at crates/baley/src/install/apply.rs:109 as high by openai, ruled downgraded.

Claim. The registration recheck does not bind the subsequent name-only removal to the entry that was checked.

Failure scenario. The second read can observe the recorded older Baley entry, then another Claude process or owner edit can replace mcpServers.baley before the launched claude mcp remove reads its configuration. The command removes the new owner entry unconditionally and the following add replaces it with Baley. Baley's home lock does not coordinate that external writer. The recheck test covers changes before the second read, not this check-to-removal window.

Filed by Cadence. Fingerprint a688ed06469433f8 over (file, claim).