Distillation

Date: Sep 8, 2026

• 🔴 [requested-review] (04:46) User requested an independent, read-only correctness review of every file under /home/byk/.local/share/opencode-v2-pilot/supervisor, inspecting the exact current source, protocol, units, tests, and documentation.
• 🟡 (04:46) User asked to verify Go API semantics against installed dependencies/source where needed and focus on framing, SCM_RIGHTS handling, file-descriptor ownership, cwd inode binding, systemd StartTransientUnit properties and signatures, state races, disconnect/start/stop ordering, structured exit status, orphan cleanup, backpressure, process lifecycle, launcher argv/environment, test realism, and whether the Node plugin can integrate with the protocol.
• 🔴 [enforced-workflow] (04:46) User required the review to remain read-only: do not edit files, start services, or run privileged operations; unprivileged tests are permitted.
• 🔴 (04:46) User required current file:line evidence for findings, classification of each finding as PASS, CONCERN, or MUST-FIX, and a final line ending exactly with MERGE or DO-NOT-MERGE.
• 🟡 (04:46) Assistant stated it would inventory the exact supervisor tree, trace the protocol and lifecycle end to end against installed Go and systemd APIs, remain read-only, run only unprivileged checks, and treat any unproven security or lifecycle invariant as a blocker.