Known source concurrency limitation, NOT FIXED by this evidence task:
At HEAD 0df1ba9eaefa23c18c535514cbf0ece4a67aae75, apps/server/src/serviceLauncher.ts #writeState (lines 560 onward) reads service-state.json, chooses launcherVersion from that snapshot, and later atomically replaces the state file. Atomic replacement does not make the read/merge/write atomic with BootService.install({start:false}). A successful concurrent installer can persist launcher B/repoint the unit B after the launcher reads A but before the launcher's write, allowing stale A to overwrite B. The sequential runtime row proves preservation after an already completed B repoint, not this interleaving. No fix, deterministic race test, or broad concurrency-safe claim was authorized or made here. Existing source defect was provided as confirmed in the capture brief.
