docs: row 41 round 2 build-log entry and session line (filbert)

Co-Authored-By: Claude Opus 5.5 <[email protected]>

BUILD-LOG.md

@@ -3816,3 +3816,11 @@ After: the candidate is 41 files, +4302/−55, over base `915e00e5`, uncommitted
 Gate at 2855e628 with the patch applied, run sequentially in a detached worktree with Docker pointed at a missing socket: every node suite and every `test-*.sh` is green except `test-task`. Its two live-recall checks need Docker, and the unpatched base fails the same two. Correction: an earlier gate over the candidate before the `--no-approve` edits had `test-queue` fail F1 once, on a stderr match. It passed three later runs and on base. The likely cause is `pausedCommit` awaiting `exit` rather than `close`, recorded as a follow-up.
 
 Row 41 is in-review: revs 244-245 in c7a2c703, request posted as #1523 comment 26991. Darkwing is the reviewer. The recorded PM→coder launch and the integration commit wait on the Q14 Vikunja cutover, per Sage. No push.
+
+### 2026-10-10 — Filbert, row 41 slice 1 S6 round 2 in review (#1523)
+
+Before: Darkwing's round 1 asked for changes (#1523 comment 26995, rev 247). R1: host↔broker IPC replies had no request id, so a stalled broker's late reply could answer the wrong request. R3: the workspace gate let a write through a dangling symlink create its target outside the workspace. R2: a half-open `launch.sock` client could hold `launcher.close()`. Notes 1-5 covered `--restricted` docs and tests, `launchPm` skipping `authorizeLaunch`, the policy parse outside the `try`, the system prompt in argv, and the surviving mutants Mh-Mk plus a hang under Mg. Sage ruled that all three are fixed this round, R1 under decision 77 (trusted IPC, no socket verb, event kind or schema change). Row 41 went back to in-progress (rev 252).
+
+After: the candidate is 42 files, +4679/−63, over base `915e00e5`, uncommitted. Packet `agents/filbert/work/s6/` at 779e9780, candidate manifest digest fd21bdc2…eb02. R1: each request carries an id, the broker echoes it, and a timeout, wrong id, missing id or unsolicited reply breaks the channel. Every waiting and later request then refuses `broker-channel-broken`, and the host exits 1. A new `packages/cli/tests/host.test.mjs` covers a SIGSTOPped broker whose reply arrives late, and the wrong-id and no-id cases. R3: `real()` walks with `lstat`, so a dangling link is refused at any depth; a real Pi write through one is tested. R2: `close()` destroys open connections. Each of R1a, R1b, R2, R3, N1, Mg, Mh, Mi, Mj and Mk was run as a mutant and fails its test. Darkwing's probes give the expected results; desync's second half ends with `kill ESRCH` because the host has already stopped. Gate at 8dd5ff00: green except test-task's two Docker-only recall checks, which the base fails identically; cli 82, harness 50. One README sentence (R2) was added after the gate; no suite reads that file. Correction: the first round 2 gate was stopped partway to add the R1 wrong-id test, and the final gate is a full rerun.
+
+Row 41 is in-review round 2: revs 253-254 in b887ee1e, request posted as #1523 comment 27004. Darkwing is the reviewer. Landing waits on Q14 (Sage's target 2026-10-13). No push.

docs/SESSIONS.md

@@ -550,3 +550,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-10T00:57:21Z | filbert | row 41 (#1523) slice 1 S6 round 1 | packet agents/filbert/work/s6/ (9b670e27), gate green but test-task Docker recall (same on base); in-review revs 244-245 (c7a2c703), #1523 comment 26991; REQUEST to darkwing, INFO to sage; acceptance run waits on Q14; no push
 2026-10-10T01:06:02Z | filbert | row 40 (#1522) slice 1 S5 review round 1 | changes requested, comment 26993 (F1 WebUI README overstates the human proof, F2 seal lacks --no-approve on a trusted checkout; N1-N3 non-blocking); gate on candidate bcc2b772 green but test-task Docker recall (same on base); rev 246 (37513585); no push
 2026-10-10T01:50:10Z | Darkwing (T3 Claude Code, thread 7525c8e4) | reviews: row 41 (#1523) slice 1 S6 round 1, row 40 (#1522) slice 1 S5 round 2 | row 41 changes, comment 26995 (R1 broker reply desync, R3 dangling symlink, R2 close hang), rev 247 (e44d96e2), packet f19787ee; row 40 changes on candidate 5cbf22c0, comment 27001 (T1 Ctrl-T input hold drained by an earlier chunk's run), rev 251 (753e71ee), packet c31bb13d; no push
+2026-10-10T01:54:24Z | filbert | row 41 (#1523) slice 1 S6 round 2 | R1 IPC request ids, R3 dangling symlinks, R2 close bound, notes 1-5; packet agents/filbert/work/s6/ (779e9780), manifest fd21bdc2; gate at 8dd5ff00 green but test-task Docker recall (same on base); in-review revs 252-254 (b887ee1e), #1523 comment 27004; REQUEST to darkwing; no push