SEQ
Minted per INSTALL, and it is BOTH the key's suffix and the bridge's registry slot — one number, so the two can never come to name different patches. Freshness, not collision avoidance: an id kept across a re-install answers null / -1 instead of the replacement's state, and a Probe channel named after it starts empty. It equally strands advice Patches.remove could not unweave, whose slot stays burned and reads null. Starts at 1, which is what leaves 0 free for warm's never-registered blueprints.