Human interface over the proven kernel workflow. Twin is the lifecycle authority. Workflow is the only next-verb source. Each primary action is one existing kernel POST. No second truth store. After VALIDATE, NOT_ACTIVE stays visible in missing. UNHANDLED is blocked, not done. RETIRE remains a legal alternative.