Distillation

Date: Sep 17, 2026

• 🔴 [requested-review] (08:32) User requested a strict READ-ONLY correctness/adversarial review of frozen v20 in /tmp/opencode/session-recovery-v20-review, requiring findings first with MUST-FIX/CONCERN severity and exact file:line evidence; if no findings, explicitly state so; response must end exactly MERGE or DO-NOT-MERGE.
• 🔴 [enforced-workflow] (08:32) User prohibited editing files, running tests/builds/services, mutating VCS/index/refs, and using recall; required reading applicable guidance and inspecting all 34 changed paths plus necessary context.
• 🔴 (08:32) User specified immutable review inputs: base commit ab9408c81cc9916177641ae8e9f08624fc27b5b9; patch /tmp/opencode/session-recovery-final-v20.patch with SHA-256 24352107c74d8245fcba7f8571ba0be4b7fc514e6c73cfbf0498f0c25f29f9ba; SEA /home/byk/Code/opencode/packages/opencode/dist/server/opencode-server with SHA-256 d0c78e881892d4f894fab7f6be00643c133ca21f9d2c88ae0d5ff31215393021; 34 paths.
• 🔴 (08:32) User required provenance, hashes, and patch applicability to be verified before substantive review.
• 🔴 (08:32) User required inspection of lifecycle, transactions, replay, concurrency, fencing, recovery identity, migrations, generated contracts, and tests.
• 🔴 (08:32) User identified prior v19 blocker checks: no Step.Interrupted or cancelling->cancelled transition before owner and outer finalizers join; coordinator cleanup must then reconcile unresolved tools/Step exactly once and clear state before a successor starts; publication failure must retain cancelling; expired cancelled must clear safely while expired cancelling must quarantine; direct SessionRunner interruption without coordinator must remain unknown; immediate ownership checks must precede both snapshot writes.
• 🔴 (08:32) User required verification of explicit resume durable intent and scanning index/current client generation.
• 🔴 (08:32) User designated the final check-to-external-call race, process-local interruption, and bounded clock skew as disclosed residual risks.