Scratch proposal only; two files, no new test registration. Requires paired geometry SelectPair and convoy ReserveInterceptPair/ApplyInterceptPair sibling proposals.
Actual full HQ methods run with adversarial radio/physical service doubles; baseline compiles then fails new pair requirement. Five focused production mutations compile then fail assertions. Run python3 /tmp/erri-pair-hq-0054/verify.py to reproduce.
Preserves singleton API/first-member fixture fields. Completed route handles retained until release; independent receipts prevent repeated advancement. Separate monotonic token allocator never reuses 400001..400256; two-member failures consume two IDs but one belief/revision attempt. Same-task bounded escort combinations avoid greedy partner starvation; total two native geometry calls per pass includes fallback. Both pending members count against existing quotas and reserve both destination cells. No singleton fallback after reservation begins.
No engine launch, target write, physical pair movement/hold or multiplayer proof. Native compile and integrated suite remain parent-owned.
