Companion

Auto identity: "auto:$nodeId-$randomHex" — the reserved auto: sentinel, nodeId, and a per-incarnation random hex suffix from random (inject the engine's seeded RNG; never the global). The nodeId prefix keeps two nodes distinct even under the same seed and makes the id readable in logs; the sentinel lets the dedup GC recognize the auto family unambiguously.