A CLI an agent runs before it writes: claim a path or a glob, see who holds one, record progress inside the lock, and pick the work back up after a crash. Identity belongs to the session rather than the process, so a lock taken by one command can be released by the next.