fix(directory): strengthen single-activation guarantees (#9958)