What broke
Refusing the session directory as well as the marker inside it — because the exit command deletes the marker and leaves the empty directory — made every worktree that had ever hosted a closed session refuse forever, for a directory containing nothing.
The rule it paid for
One condition per door; the manifest names the directory as regenerable and states the residual risk beside it.