Distillation

Date: Sep 17, 2026

• 🔴 [requested-review] (09:05) User requested a strict READ-ONLY security/pentest review of frozen v21 in /tmp/opencode/session-recovery-v21-review, covering all 34 changed paths and relevant context.
• 🔴 [enforced-workflow] (09:05) User directed not to edit files, run tests/builds/services, mutate VCS/index/refs, or use recall during the review.
• 🔴 (09:05) User required immutable inputs to be verified first: base commit ab9408c81cc9916177641ae8e9f08624fc27b5b9; patch /tmp/opencode/session-recovery-final-v21.patch with SHA-256 2ae4eea72024cafe8b69c0461063ee25cbf54608856cd258866b7f3b86620b36; SEA /home/byk/Code/opencode/packages/opencode/dist/server/opencode-server with SHA-256 aa98d64abb3bf6ac0ef88a940f9c41c6eb14ffeab3c3a7846921ba01ef46643d; expected changed-path count: 34.
• 🟡 (09:05) User asked for adversarial inspection of: terminal failed Step crash windows and multi-tool idempotence; concurrent interrupt single-flight and wake preservation; post-finalizer cancellation ordering; stale-owner fencing and exact lease predicates; corrupt identity/cross-Session rows; replay/duplicate wake/starvation; provider/tool/snapshot side effects; schema lineage; generated clients; authentication; and layering.
• 🔴 (09:05) User required explicit verification that a completed Step.Failed can never become synthetic continue.
• 🔴 (09:05) User stated unresolved tools must remain model-visible.
• 🔴 (09:05) User stated completed continue-phase Steps must still redrive.
• 🔴 (09:05) User required direct verification that snapshot prevIds names base snapshot f14a9b18-8207-487e-a3d3-227e629ba9ad.
• 🔴 (09:05) User designated final check-call, process-local routing, and bounded clock skew as disclosed residuals.
• 🔴 (09:05) User required the review output to present findings first, classify them as MUST-FIX or CONCERN with exact file:line evidence, and end with exactly MERGE or DO-NOT-MERGE.