Reuse Hopper's live socket lease for each canonical release cache entry and retain its cleanup capability alongside temporary inspection resources. Move that shared lease owner into process so setup and provider adapters consume the same implementation without reversing application dependencies. Only proven malformed or unauthenticated cache evidence permits approved replacement. Preserve old evidence and roll it back if publication fails; keep unavailable inspection and permission failures distinct from invalid data. Cover real cross-process publication/cancellation, rollback, failed lease release, missing/malformed evidence and the moved provider consumers. Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com> Co-authored-by: gensokyo-dev <342580529+gensokyo-dev@users.noreply.github.com>