- SSE: GET /dsh-balance/events pushes the snapshot the moment a check changes the balance (<1s to the widget); 15s poll kept as fallback
- CI hardening: syntax gates for every source file, client bundle factory + slot registration contract test, full host apply harness (tool, both routes, summary payload, SSE first frame)