An HMR replacement left the old instance's pick promise able to adopt a second path through the shared owner callbacks; settlements now check a component-lifetime ref (an injected-face identity change alone keeps the pending settlement — the host-side dialog is unchanged, and the wire has no per-request abort). Both settlement arms covered (ds-review-bot).