DL-170
The spec gains a SHALL binding one container per agent account, so the agent-scoped reject-on-live rule is contract-backed rather than resting on the Runner’s incidental container-name derivation (NamePrefix + accountID); lands with the T0 wire changes
Status: Superseded by DL-253 (Matt, 2026-08-25)