The ensure in flight or finished; callers for the same name await the same promise.
Epoch ms the entry was created; an entry older than ENSURE_CACHE_TTL_MS is a miss.
Tool-set + model-settings fingerprint the ensure ran with; a different one re-runs the ensure.
What the ensure cache remembers per managed-agent name.