docs: record orchestration round 2 and clarify VHDX reclamation - #781

Scope

Record the command center's orchestration round 2 and the co-op's measured launch-and-close gate. Add the dated decision, five contiguous anti-pattern lessons and three portable snapshots of the deployed hcom/tmux/agentsview configuration. After #753 landed, rebase these records and correct its VHDX statement to distinguish non-sparse disks from automatic sparse reclamation.

• Base commit: 0d5e6506434fab598dee861c749a22e628beb75a (includes landed Anti-pattern log: close finished jobs' trees and caches with their own tools; reclaim WSL VHDX with wsl --manage --compact #753 at 9f3af37d)
• Lane: lane:foundation (the sole PR label).
• Owned paths: docs/decisions/2026-10-06-cc-orchestration-composition.md, docs/harness-defaults.md, examples/hcom-wt-tmux.toml.example, examples/hcom-lanes.conf, examples/agentsview.service.example; their registrations in manifests/evidence.json are isolated in the final commit.
• The record covers receipt entries through 6:00:21 AM EDT (10:00:21Z). Later stopper observations remain with their owner. No host settings, install-plan files or credentials are changed; this PR does not merge anything.

SOTA sources

• aannoo/hcom v0.7.27, 2c5f343b2f9ec4bf2acf49c0431860e7c2ae578b: src/config.rs user-preset field merge; src/terminal.rs open/close; src/launcher.rs:1991–2044 generated name/tag distinction; src/commands/kill.rs:557–569,677–679 bare-name result; native Codex hook delivery.

• tmux/tmux 3.6a, cc117b5048f77a4842820f8ebbe3a86e5c077224: server-fn.c, server-client.c, server.c, client.c close/exit ordering and tmux.1 lane options. Installed host reports tmux 3.6; the record distinguishes that execution from the 3.6a source pin.

• kenn-io/agentsview v0.43.0, 9be7745ad1906ee24e04eb05bb86c872ef0939a1: cmd/agentsview/main.go, serve_replacement.go, configuration/command docs; supervised foreground serve --replace, idle timeout and optional authentication. Passwordless operation is the user's scoped host divergence.

• MicrosoftDocs/terminal, c341a6362f9f0346a17ecc5e1e74d2cd9372c8f9: TerminalDocs/customize-settings/profile-advanced.md closeOnExit=graceful and command-line tab launching.

• systemd/systemd v259, 9ca433482f2281d71718718705ca8cd3bf562ad6: man/systemd.service.xml foreground simple service and restart behavior.

• openai/codex rust-v0.160.0, a956835d: per-thread writer locks and app-server in-process live-status scope; OmniRoute v3.8.51, c1e30b76: chat-completions caller correlation-ID preservation.

• Microsoft WSL disk-space documentation, updated 2025-02-05 (MicrosoftDocs/WSL source 7b28cc1e); automatic disk-space cleanup announcement, 2023-09-18; experimental sparseVhd setting, displayed update 2026-09-16 (source 7ea1c6f9). The disk-space page covers disk management; the announcement/configuration provide the sparse exception. No claim is made that disk-space.md contains a sparse section.

Evidence-class table

Step 6, step 5 OTel queries, 11a–f, 11h and 11i were not run; only the co-op-caller half of 11g ran. The example still carries the deployed ecosystem.lane={instance_name} value, so stable OTel lane attribution remains unverified. The no-prompt zumi spontaneous close remains unexplained. The decision drops the refuted token figures and refers to e2e-truth-sweep-wf_6f2c775d-293.json per critic finding 3.

Local commands run

nice -n 19 python3 scripts/component_matrix.py --write
exit 0: 32 rows, zero flip-rule violations (no generated-file diff)
nice -n 19 python3 scripts/new_host_grand_list.py --write
exit 0: 32 layers, 66 winners (no generated-file diff)
nice -n 19 python3 scripts/validate.py
exit 0: 69 components, 10340 hashed files, 4 profiles, 214 receipts
nice -n 19 python3 -m unittest tests.test_adoption_docs_consistency tests.test_evidence_manifest
exit 0: Ran 44 tests in 25.095s; OK (skipped=1)
git diff --check
exit 0

Post-rebase validation ran 10:01:59–10:02:49 AM EDT (14:01:59–14:02:49Z); touched tests ran 10:02:50–10:03:15 AM EDT (14:02:50–14:03:15Z), outside both paper windows. Fixture sort-error output is expected negative-control evidence, not manifest drift. A read-only completeness critic verified the unchanged four artifacts and five contiguous rows, the bounded P3 change and the five matching registrations; no blocker.

The rebased tree retains both owners' table rows. The final evidence commit is rebuilt from main's manifest instead of hand-merging registry entries. Checks run at nice 19 outside the paper windows; no live provider/GPU or disk operation is part of this PR. Restart loss inventory records only regenerable tool scratch, with no sole-copy repository work or lane-created transient units lost. A post-restart API read found zero review threads, including connector threads.

Decision record

docs/decisions/2026-10-06-cc-orchestration-composition.md records the alternatives, overturn conditions, passwordless agentsview divergence, lane-tabs-only reversal of the tmux rejection, measured results and corrections.

Handoff to the install-plan owner

fixwave-defects holds the install-plan files through #723. Proposed text only; none of the following is applied by this PR. Select the session-analytics row in evidence/artifacts/new-wsl-install-plan-20261002/install-plan.json (slot at line 2724 on the original ecfa1127 base), retain its release/download/launcher provenance, and apply these exact field replacements:

"owner": "agentsview 0.43.0 (supervised local live archive)"

Within needs (line 2737):

"systemd_user_unit": true

Replace service (lines 2749–2753) with:

{
  "form": "supervised systemd user unit agentsview.service; foreground agentsview serve --replace; Restart=always; RestartSec=10",
  "port": 21808,
  "port_setting": "host=127.0.0.1, port=21808 and daemon_idle_timeout=\"0s\" in the owned archive config.toml",
  "start_command": "systemctl --user daemon-reload\nsystemctl --user enable --now agentsview.service",
  "stop_command": "systemctl --user stop agentsview.service"
}

Carry examples/agentsview.service.example into the plan's config/agentsview.service under the plan's ownership/overwrite rules. After config installation, add this exact commands entry:

"install -d -m 0755 -- \"$HOME/.config/systemd/user\"; install -m 0644 -- \"$plan_dir/config/agentsview.service\" \"$HOME/.config/systemd/user/agentsview.service\""

Add the installed unit's $HOME/.config/systemd/user/agentsview.service path to config_paths. Add this exact key to the owner's config/agentsview.toml:

daemon_idle_timeout = "0s"

Register adopted worker roots as explicit [agents.codex] homes = [...] entries (no glob), using the owner's maintained job-home convention; the current live configuration has ten selected worker homes. Preserve the existing warning/review path for a differing owned config. The scoped passwordless choice remains explicit; do not copy the workstation's authenticated unit by accident.

Reconcile the service_health detached-daemon premise and notes with supervised acceptance: systemctl --user is-active agentsview.service, listener PID/cgroup on 21808, HTTP /api/v1/version and representative fresh session reads, then stop/read/no-auto-start/restart checks. Retain native sync/list/usage and fresh/absent-session controls; any remaining CLI read must use AGENTSVIEW_NO_DAEMON=1. Carry the config, unit and plan hashes together under docs/lanes.md's final-commit protocol. These follow-ups implement step 1 and critic finding 13; they are not claimed passed by this records PR.

Host evidence

No files under evidence/hosts/ change and no platform status changes. The private co-op receipt is historical local integration evidence, not a newly registered host acceptance receipt.

Checklist

• No GitHub Actions change; upstream sources are pinned in the record.
• No new workflow permissions or required secrets.
• No secrets printed, logged or committed.
• No paid hosting, subscription or billing surface introduced.
• Peer-owned files/worktrees preserved; owner-held install-plan edits handed off.
• Exactly one label: lane:foundation; draft PR; no merge.