Module ports 

Functions

allocate

First port scanning up from start that is neither promised to another instance nor OS-unbindable right now. The chosen port is added to used so one allocation pass stays self-consistent.

used_ports

Ports already promised to instances. Binding records are the single source of truth: removing an instance frees its ports with no ledger.