- ModelStore/FileVault: drop nonisolated(unsafe) on shared, mark all instance
methods nonisolated (they only read filesystem); ModelKind enum also nonisolated
- AIRuntime ↔ ModelStore cross-actor call resolved by the above
- LLMSession: replace deprecated Device.setDefault(device:) with task-scoped
Device.withDefaultDevice(.cpu, body:); wrap both load and generate so the
TaskLocal propagates through ModelContainer.perform
Rename @testable imports across all test/UI test files after the Tiji→Kangkang
project rename in 44ed01a. Add shared scheme. Sync CLAUDE.md / W2 plan / spec
v1.0 to current scope (Symptom feature noted, C1/C2 flow lockdown).