One device-owned UI read model, not a command coordinator.

Subscribe is a serialized call: the caller is registered before receiving the snapshot. Later operations come directly from this same PID, in order. Clients monitor it and subscribe afresh after a restart or a distribution disconnect. Property payloads are only invalidation hints, never reducer operations.