Harden runtime flags and thin Apple/canvas seams

docs/modernization/debt.md

@@ -18,6 +18,22 @@ agent or engineer to remove them without reconstructing context from chat.
 
 ## Reductions
 
+- 2026-06-16: `DEBT-0003` was narrowed again. The Windows main-loop run-state
+  and VR worker coordination flags in `src/main.cpp` now use `std::atomic`
+  instead of unsynchronized globals; retained Win32 entrypoint ownership,
+  global app singleton reach, and broader runtime coupling remain.
+- 2026-06-16: `DEBT-0017` was narrowed again. Retained Apple ObjC handles plus
+  storage paths now live behind one local helper in
+  `src/platform_legacy/legacy_platform_services.cpp`, and the iOS SonarPen
+  bridge now starts through that retained Apple state instead of reading
+  `App::I` inside the bridge body; the retained Apple fallback adapter and
+  broader platform-to-app singleton reach remain.
+- 2026-06-16: `DEBT-0036` was narrowed again. `NodeCanvas` smoothing-mask face
+  shader setup plus per-face draw execution now route through
+  `execute_legacy_canvas_draw_merge_smask_faces(...)` in
+  `src/legacy_canvas_draw_merge_services.h` instead of spelling that pass out
+  inline in `NodeCanvas::draw()`; broader canvas draw orchestration and
+  retained GL resource ownership remain.
 - 2026-06-16: `DEBT-0036` was narrowed again. `NodeCanvas` merged-path
   per-plane merged-texture draw execution now routes through
   `execute_legacy_canvas_draw_merge_layer_texture(...)` instead of spelling out