Cognitive-physical decoupling with a session-centered runtime: one codebase, any hardware, with multi-layer safety and full auditability.