What broke
Refusing the session directory as well as the marker inside it (because the exit command deletes the marker and leaves the empty directory) made every worktree that had ever hosted a closed session refuse forever, for a directory containing nothing.
The rule it paid for
One condition per door; the manifest names the directory as regenerable and states the residual risk beside it.