fix: notification loop assumes ordered events, bounded prompts, and managed session lifecycle — none hold in production