Keep active-turn dynamic tool snapshots frozen to avoid cache churn, while tightening provider-owned tool request ownership so only the registering connection can answer them. Add a 5-second grace period for provider disconnects before failing any in-flight provider- owned dynamic tool calls, ignore late replies after those calls are already resolved, and extend websocket/stdio coverage for registration-after-start, hijack attempts, and provider disconnect during an in-flight call.