fix: correct rare-case bugs from adversarial audit across deadlocks, caching, serialization, memory safety, and Python frontend - #290