RemoteModifierContext

Trusted client inputs for one active modifier factory. identity remains stable while the corresponding server modifier survives reconciliation. State reads are confined to the client session's owner thread after preparation.