Distillation

Date: Sep 16, 2026

• 🔴 [enforced-concurrency-safety] (22:00) User asserted the system must “never dispatch a provider after ownership changes.”
• 🔴 [enforced-concurrency-safety] (22:00) User asserted the system must “never publish streamed output after ownership changes.”
• 🔴 [enforced-concurrency-safety] (22:00) User asserted the system must “never start a local tool after ownership changes.”
• 🔴 [enforced-concurrency-safety] (22:00) User asserted the system must “never fail interrupted tools after ownership changes.”
• 🔴 [enforced-concurrency-safety] (22:00) User asserted the system must “never commit continuation before unresolved hosted tools are reconciled.”
• 🟡 (22:00) The patch added effect tests with the exact names "never dispatches a provider after ownership changes", "never publishes streamed output after ownership changes", "never starts a local tool after ownership changes", "never fails interrupted tools after ownership changes", "never commits continuation before unresolved hosted tools are reconciled", and "keeps provider failure unknown until unresolved tools are durable".
• 🟡 (22:00) The provider-dispatch ownership-change test verifies no additional events are persisted by comparing (yield* db.select().from(EventTable).all()).length with eventsBefore.
• 🟡 (22:00) The unresolved-hosted-tool continuation test uses LLMEvent.toolCall(...) and queries EventTable for event type "session.next.step.started.1" to ensure continuation is not committed prematurely.
• 🟡 (22:00) The provider-failure durability behavior keeps failure state unknown until unresolved tool outcomes are durable.
• 🟡 (22:00) Interrupted tool recovery represents an indeterminate result as { type: "unknown", message: "Tool execution outcome unknown after interruption" }.
• 🟡 (22:00) The patch includes a SQLite abort trigger using SELECT RAISE(ABORT, 'crash before interrupted tool publication'); to simulate a crash before interrupted-tool publication.
• 🟡 (22:00) One recovery assertion expects the successor execution state to equal { id: "compaction-successor", phase: "unknown" }.