2.1.9
File-swap switch refuses stranger adoption (adoptLive:false on the switch path) so a dead vault credential surfaces as re-login-needed instead of a false success; dead-switch failures name the live login with recovery steps; successful switches warn about still-running sessions.