Distillation

Date: Sep 16, 2026

• 🔴 (13:37) User asserted recovery must “never recover a pre-promotion claim when input commits at the recovery boundary.”
• 🔴 (13:37) User asserted recovery must “never promote a recovery superseded before scanner validation.”
• 🔴 (13:37) User asserted recovery must “never promote a quarantined recovery continuation as an ordinary steer.”
• 🔴 (13:37) User asserted recovery must “never advance the Context Epoch after ownership changes.”
• 🔴 (13:37) The patch includes effect tests named never recovers a pre-promotion claim when input commits at the recovery boundary, never promotes a recovery superseded before scanner validation, never promotes a quarantined recovery continuation as an ordinary steer, and never advances the Context Epoch after ownership changes.
• 🔴 (13:37) The pre-promotion boundary test expects no wake events (expect(wakes).toEqual([])), expects the request to fail (expect(Exit.isFailure(requested)).toBe(true)), and expects SessionInput.promoteNextQueued(db, events, sessionID) to return false.
• 🔴 (13:38) In packages/core/src/session/runner/llm.ts, interrupted tool execution records error { type: "unknown", message: "Tool execution interrupted" }, preserves provider.executed as tool.provider?.executed === true, conditionally preserves provider metadata, and commits with SessionExecutionClaim.update(db, claim).
• 🔴 (13:38) packages/core/src/session/runner/llm.ts defines awaitToolFibers(fibers) as Effect.raceFirst(FiberSet.join(fibers), FiberSet.awaitEmpty(fibers)).
• 🔴 (13:38) packages/core/src/session/runner/llm.ts treats user decline as a fatal defect whose reason.defect is either PermissionV2.DeclinedError or QuestionV2.RejectedError; the accompanying comment says this matches V1 by halting the loop rather than converting the decline into model-facing tool output.
• 🔴 (13:38) packages/core/src/session/runner/llm.ts calls FiberSet.clear(toolFibers) during interruption handling.
• 🔴 (13:38) Generated event schemas include: session.next.prompt.execution_requested, requiring timestamp, sessionID, and messageID; session.next.step.interrupted, requiring timestamp, sessionID, assistantMessageID, and error; and session.next.step.recovered, requiring timestamp, sessionID, executionID, and phase, where phase is one of "ready", "unknown", or "continue".