cancel

Host-provided so a component plugin can cooperatively cancel one of its own in-flight invocations. Job ids are host-minted and opaque. request-cancel marks a job; the running guest observes the mark and unwinds itself, without disturbing the store's other tenants.