Workday start privacy-boundary and runner cleanup release. Sanitizes duplicate-start active-marker output before returning workday_session_already_active, hardens Windows runner process-tree cleanup after active-marker write failures, and keeps local-first/UIA-first privacy boundaries unchanged. Local harness, fresh manual UIA smoke, and Windows Harness run 28346732386 passed.