/api/v1/environments/{id}/wake

paused → running with epoch + 1 fencing. Exec handles are pinned to the epoch:

every execId recorded before the bump answers 404 afterwards. Liveness after wake is

confirmed through the exec path, not a bare carrier readiness gate. Operator face:

principal sessions are denied 403 / 404 not_owned.