Distillation

Date: September 16, 2026

• 🔴 [requested-review] (13:21) User requested a read-only adversarial correctness and security review of ONLY the native ONNX runtime selection/fallback/packaging slice in /home/byk/Code/opencode-lore-embedding-runtime at current Jujutsu change tmzmtlss.
• 🔴 (13:21) User constrained the review: do not edit files, mutate VCS, use the network, or run production services; inspect the actual current source.
• 🔴 (13:21) User defined review scope as packages/core/src/ort-native.ts, native loader classification in embedding-worker-types.ts, the fallback boundary in embedding-worker.ts, packages/gateway/script/bundle.ts, ort-platform-package.ts, and related ort-native, embedding-worker-types, bundle-exports, and ort-platform-package tests.
• 🟡 (13:21) User asked the review to focus on dependency-scope escapes, symlinks/path containment, target/libc/format validation, malformed addon handling, unrelated error misclassification, one-shot WASM fallback, CJS/Bun ESM parity, generated artifact freshness, and whether regressions exercise real pre-fix conditions.
• 🔴 (13:21) User required substantive PASS/CONCERN/MUST-FIX findings with exact file:line references and a final MERGE or DO-NOT-MERGE verdict, with no changes made.