deploy-lxc.md: Debian 12 packages, vault client + identity, Warpgate host key
(pinned by the identity), helper scripts and protocol file, all-remote config,
cron under exec --secret-env, logs/heartbeat, adding a terminal.
design.md 9: P1-6 done for Linux/macOS; Windows still on the helper scripts (TODO unify).
- runbook: how executor binaries are resolved (bins or PATH) and what that
assumes on oregon (no codex installed) and win10; cancellation and
max_progress_rounds in the item lifecycle; secrets scrubbed from children.
- design: blocked-by ordering is a TODO (not read by the scheduler); failure
classification, success-when-tagged, one-time immediate rebuild, retries
outside the thread-round budget, ID-based new-comment filter.
- executor contract: how core reads ExecResult, kill used for cancel, Windows
quoting assumptions, codex exec resume without -C/-s.
jj.wang