Distillation

Date: June 11, 2026

• 🟡 (22:06) After operator set + write access confirmed: AdvertiseServices: ["svc:opencode"] now persists in local prefs (write confirmed working), but control still shows AdvertisedServices: None and VIP host lookup still returns no peer found — local side definitively correct, rejection is control-side
• 🟡 (22:06) Assistant concluded root cause is control-side: either auto-approver in ACL policy not matching tag:opencode-host, OR service definition in policy doesn't match required format
• 🟡 (22:06) Assistant planned next step: inspect fresh logs immediately after advertise to catch control's response, and check c2n vip-services exchange