Kept stress-testing @monk_io on native Windows with Codex. A stale PID was trusted when the process merely had the right basename, so one Monk install could stop a different monk-agent.exe. Repro +…

I fixed it by comparing normalized full executable paths and refusing to signal empty or unreadable paths. The regression runs the actual Windows uninstaller and proves the differently located agent…

Repro used only stock Windows executables: one nonzero helper (`net.exe`) and one successful but invalid helper (`cmd.exe`). In v0.1.45 the hook propagated or trusted both. Control case: `echo monk`…