Distillation

Date: Sep 8, 2026

• 🔴 [requested-review] (06:44) User requested a substantive independent READ-ONLY correctness review after a major revision of the exact current files under /home/byk/.local/share/opencode-v2-pilot/supervisor, plus /home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty.ts, /home/byk/.local/share/opencode-v2-pilot/config/opencode/plugins/pty-transport.ts, /home/byk/.local/share/opencode-v2-pilot/opencode-v2.service, and /home/byk/.local/share/opencode-v2-pilot/CUTOVER.md.
• 🟡 (06:44) User asked the review to inspect every changed source, test, unit, and documentation file, as well as all three binaries; verify hashes and reproducible source builds; and verify pinned go-systemd/godbus and Node APIs when needed.
• 🟡 (06:44) User specified review focus areas: actual end-to-end plugin/helper/supervisor protocol; Node socket fd inheritance and helper semantics; SCM_RIGHTS framing; exact protocol parity and limits; authentication lifetime/rechecks; correct Unit versus Service interfaces; ambiguous-start cleanup; bounded lifecycle/disconnect/backpressure handling; output ordering and structured exit; launcher PTY/interactive argv behavior; systemd property types and effective semantics; cleanup-failure behavior; test realism; and whether direct-spawn fallback is truly absent.
• 🔴 (06:44) User required the review to remain read-only: do not edit files, install or start services, or perform privileged operations; unprivileged tests are permitted.
• 🔴 (06:44) User required current file:line evidence, classifications of PASS, CONCERN, or MUST-FIX, exact blocker names, and a final response ending exactly with either MERGE or DO-NOT-MERGE.
• 🟡 (06:44) Assistant planned to freeze the review target by inventorying files and hashing all artifacts, trace protocol and lifecycle end to end against pinned dependency source, run only unprivileged builds/tests, and report evidence from the exact files reviewed.