pass 2

docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md

@@ -133,12 +133,16 @@ These are still compatibility seams, not a completed subsystem extraction. Some
 - render-state and shader-build reads in `OpenGLComposite.cpp`, `OpenGLShaderPrograms.cpp`, and `ShaderBuildQueue.cpp` now route through `RuntimeSnapshotProvider`
 - `RuntimeSnapshotProvider` now depends on `RuntimeStore` rather than sharing `RuntimeHost` directly
 - render-state assembly, cached parameter refresh, and frame-context application now flow through `RuntimeSnapshotProvider` and store-owned snapshot helpers instead of `RuntimeHost` public APIs
+- `RuntimeSnapshotProvider` now publishes versioned render snapshot objects and serves matching consumers from the last published snapshot
 - service ingress and polling coordination now route through `ControlServices`
 - `ControlServices` now queues coordinator results for OSC commit and file-poll outcomes instead of directly deciding runtime/store policy
 - timing and status writes now route through `HealthTelemetry`
 - `HealthTelemetry` now owns the live signal, video-I/O, and performance snapshots directly instead of `RuntimeHost` keeping those backing fields
 - render-side frame advancement and render-performance reporting now flow through `RuntimeSnapshotProvider` and `HealthTelemetry` instead of directly through `RuntimeHost`
+- `RuntimeStore` now owns its durable/session backing fields directly instead of wrapping a compatibility `RuntimeHost` object
+- `RuntimeCoordinator` now uses explicit `RuntimeStore` query APIs/read models instead of friendship or direct store-internal access
 - live OSC overlay state and smoothing/commit decisions now live under `RenderEngine` instead of `OpenGLComposite`
+- coordinator result application, shader-build requests, ready-build application, and runtime-state broadcasts now route through `RuntimeUpdateController` instead of being interpreted directly by `OpenGLComposite`
 - `OpenGLComposite` now owns a `RenderEngine` seam for renderer, pipeline, render-pass, and shader-program responsibilities
 - `OpenGLComposite` now owns a `VideoBackend` seam for device/session ownership and callback wiring
 - `OpenGLVideoIOBridge` now acts as an explicit compatibility adapter between `VideoBackend` and `RenderEngine`, instead of `OpenGLComposite` directly owning both sides
@@ -147,9 +151,6 @@ That means the next extraction work can focus on moving responsibility behind th
 
 Remaining extraction work includes:
 
-- replacing the compatibility `RuntimeHost` backing object still owned inside `RuntimeStore`
-- removing coordinator friendship/access to store-internal host data
-- publishing render snapshots as explicit immutable or near-immutable objects rather than building them from store internals on demand
 - moving persistence to an asynchronous writer in a later phase
 - replacing polling/shared-object coordination with the planned internal event model
 

docs/subsystems/RuntimeSnapshotProvider.md

@@ -481,7 +481,7 @@ Recommended tests:
 Its contract is:
 
 - build from store-owned state
-- publish immutable or near-immutable render snapshots
+- publish immutable or near-immutable render snapshots; the current implementation keeps the last matching versioned snapshot in `RuntimeSnapshotProvider`
 - version them explicitly
 - keep frame-local timing separate
 - give render a cheap, lock-light read path

docs/subsystems/RuntimeStore.md

@@ -405,7 +405,7 @@ Initial likely contents:
 - preset load/save access
 - package catalog read access
 
-At this stage, `RuntimeHost` may still be the implementation behind the façade.
+This stage is now past the initial compatibility point: `RuntimeStore` owns its durable/session backing fields directly rather than wrapping a `RuntimeHost` object.
 
 ### Step 2: Move Pure Persistence Helpers First