<!-- task=m-iop-owned-single-request-agent-execution/10+09_workspace_files plan=2 tag=REVIEW_API milestone-task=tool-executor -->

# Workspace File Executor Contract and Containment Repair

## For the Implementing Agent

Implement every Required finding exactly as routed. Do not start or monitor orchestration, broaden this packet into command/cancel/cleanup behavior, raise the Go module baseline, or substitute verification for a direct fix. Run every final verification command with fresh test execution and fill `CODE_REVIEW-cloud-G10.md`; official review owns verdict, log renames, completion, and archive moves.

## Background

The first implementation created the catalog and direct file executor, but official review found that the request wire cannot execute writes, per-request authority is not frozen, and two filesystem paths violate containment or bounded-allocation requirements. This repair closes all seven Required findings while preserving packet 10's file-only boundary and the approved Mac-owned execution design.

## Archive Evidence Snapshot

- Plan 1 and its FAIL review are preserved at `agent-task/m-iop-owned-single-request-agent-execution/10+09_workspace_files/plan_cloud_G08_1.log` and `agent-task/m-iop-owned-single-request-agent-execution/10+09_workspace_files/code_review_cloud_G09_1.log`.
- The review recorded Required findings R1–R7: unrepresentable typed writes; missing immutable request capabilities/limits and operation-aware catalog validation; symlink-parent mutation before rejection; unbounded list allocation; Go 1.24-incompatible `os.Root` methods; raw startup-path disclosure; and missing bootstrap/lifecycle/adversarial proof.
- Fresh focused race and package tests passed, but required vet failed on the Go 1.25-only `os.Root.MkdirAll` and `os.Root.Rename` calls. Darwin arm64 compile, documentation search, and whitespace checks passed. A temporary focused test proved that a rejected write can create a directory through an in-root symlink; the reproducer was removed after confirmation.
- The prior no-verdict pass remains preserved as `plan_cloud_G08_0.log` and `code_review_cloud_G09_0.log`. The unique predecessor completion evidence is `agent-task/archive/2026/08/m-iop-owned-single-request-agent-execution/09+08_workspace_wire/complete.log`.

## Finding Resolution Map

| Finding | Resolution | Exact owner files | Changed precondition |
|---------|------------|-------------------|----------------------|
| R1 | Direct fix | `proto/iop/runtime.proto`, generated Go/Dart bindings, `apps/node/internal/node/workspace_handler.go`, handler/parser tests | WRITE has one structured path-plus-content input and reaches `Runtime.Write`; legacy incomplete input remains rejected. |
| R2 | Direct fix | `proto/iop/runtime.proto`, generated bindings, `apps/edge/internal/service/workspace_wire.go`, `apps/node/internal/workspace/runtime.go`, wire/runtime tests | Edge sends only frozen binding authority; Node admits only catalog subsets/lower limits and supports operation-specific zero limits. |
| R3 | Direct fix | `apps/node/internal/workspace/path.go`, `identity_unix.go`, `identity_other.go`, executor tests | Each parent is opened/created descriptor-relatively with no-follow validation before mutation. |
| R4 | Direct fix | `apps/node/internal/workspace/file_executor.go`, `file_executor_test.go` | LIST consumes fixed-size batches and stops at entry/output caps without whole-directory allocation. |
| R5 | Direct fix | workspace path/identity/executor files and verification | No Go 1.25-only API remains; Go 1.24 vet and Darwin compile are mandatory. |
| R6 | Direct fix | `apps/node/internal/workspace/runtime.go`, runtime/bootstrap tests | Catalog failures expose only stable errors; sentinel root text is absent from returned errors and captured logs. |
| R7 | Direct fix | bootstrap module/tests, workspace tests, contract/spec | Composition has a deterministic host seam, readiness and close order are observed, and claims follow passing adversarial tests. |

## Analysis

### Files Read

- `AGENTS.md`
- `agent-ops/rules/project/rules.md`
- `agent-ops/rules/common/rules-roadmap.md`
- `agent-ops/rules/common/rules-agent-spec.md`
- `agent-ops/rules/project/domain/node/rules.md`
- `agent-ops/rules/project/domain/platform-common/rules.md`
- `agent-ops/rules/project/domain/testing/rules.md`
- `agent-test/local/rules.md`
- `agent-test/local/node-smoke.md`
- `agent-roadmap/current.md`
- `agent-roadmap/phase/knowledge-tool-optimization-extension/phase.md`
- `agent-roadmap/phase/knowledge-tool-optimization-extension/milestones/iop-owned-single-request-agent-execution.md`
- `agent-roadmap/sdd/knowledge-tool-optimization-extension/iop-owned-single-request-agent-execution/SDD.md`
- `agent-contract/index.md`
- `agent-contract/inner/edge-node-runtime-wire.md`
- `agent-contract/inner/execution-runtime.md`
- `agent-spec/index.md`
- `agent-spec/runtime/edge-node-execution.md`
- `proto/iop/runtime.proto`
- `apps/edge/internal/service/single_request_types.go`
- `apps/edge/internal/service/single_request_workspace.go`
- `apps/edge/internal/service/workspace_wire.go`
- `apps/edge/internal/service/workspace_wire_test.go`
- `apps/node/internal/transport/parser.go`
- `apps/node/internal/transport/parser_test.go`
- `apps/node/internal/workspace/runtime.go`
- `apps/node/internal/workspace/runtime_test.go`
- `apps/node/internal/workspace/path.go`
- `apps/node/internal/workspace/identity_unix.go`
- `apps/node/internal/workspace/identity_other.go`
- `apps/node/internal/workspace/file_executor.go`
- `apps/node/internal/workspace/file_executor_test.go`
- `apps/node/internal/node/node.go`
- `apps/node/internal/node/workspace_handler.go`
- `apps/node/internal/node/workspace_handler_test.go`
- `apps/node/internal/bootstrap/module.go`
- `apps/node/internal/bootstrap/workspace_runtime_test.go`
- `apps/node/internal/bootstrap/runtime_supervisor.go`

### SDD Criteria

- The approved SDD is `agent-roadmap/sdd/knowledge-tool-optimization-extension/iop-owned-single-request-agent-execution/SDD.md`; its implementation lock is released and the active milestone task is `tool-executor`.
- S04 requires rejection of absolute/foreign paths, caller access to `.iop`, sibling namespaces, mount crossings, and symlink escape before effects.
- S05 requires typed read/list/write/delete success and failure with bounded output. This repair completes only those file-operation semantics.
- Command execution, process cancellation, and cleanup remain deferred to their scheduled packets and must stay typed unsupported here.

### Verification Context

- No separate handoff was supplied. Review evidence and all commands were gathered locally under the project's local-test rules.
- The host is Linux arm64 with Go 1.26.2; `go.mod` declares Go 1.24. The implementation must compile at the declared language version and independently cross-compile the workspace package for Darwin arm64.
- `protoc`, Go/Dart generators, and Flutter are available. Regenerated bindings and `make client-test` provide the client binding compile gate.
- Actual Mac smoke remains the later `claude-smoke` milestone gate described by the SDD. It is not required to decide or implement this deterministic file-boundary repair.

### Root Cause and State Boundary

- The open wire transports a ref instead of the frozen authority selected by the coordinator. The runtime consequently stores a pointer to full catalog authority, so request-specific narrowing cannot be represented or validated.
- WRITE reused a scalar oneof even though it needs a compound value. The handler's fail-closed rejection is safe but makes the required operation unavailable.
- `Root.MkdirAll` is both too new for the module baseline and effectful before the later symlink check. `ReadDir(-1)` applies logical output limits only after unbounded allocation.
- Runtime composition is not independently testable on Linux because it reads the process GOOS directly. The current direct constructor tests do not establish the before-ready or close-order behavior claimed by the plan.

### Test Coverage Gaps

- No handler/parser test proves a structured WRITE success response or rejects legacy/incomplete write input.
- No wire/runtime test proves that a caller cannot widen operations, command ids, or limits beyond the frozen Edge binding and catalog.
- No permanent test asserts zero mutation after symlink-parent, replaced-parent, mount, special-file, or post-open failure.
- No large directory test proves fixed-memory listing and deterministic truncation.
- No returned-error/log test uses a unique root sentinel.
- No composition test observes workspace validation before readiness or workspace close before session/store teardown.

### Symbol References and Compatibility

- Preserve existing `WorkspaceToolRequest` field numbers 1–9. Add `WorkspaceWriteInput write = 10` to the existing input oneof; keep legacy `write_content = 7` for source/wire compatibility but reject it as incomplete for WRITE.
- Extend `WorkspaceOpenRequest` with copied operations, command ids, and effective read/write/output/command-timeout limits on new field numbers. The Edge overwrites these fields from its frozen binding instead of trusting caller-supplied values.
- Change `Runtime.Open` to accept and copy one admitted request-authority value. Duplicate open is idempotent only when the complete immutable authority is identical.
- Use existing Unix/other platform helper files for descriptor-relative no-follow operations rather than raising `go.mod`. The Unix implementation may use the existing `golang.org/x/sys/unix` dependency; the unsupported platform helper must remain fail closed.
- Preserve existing optional `transport.WorkspaceHandler` interfaces and typed unsupported command/cancel/cleanup responses.

### Scope Rationale

- Include the wire shape, generated bindings, Edge open construction, Node validation/dispatch, secure bounded file primitives, bootstrap lifecycle seams, adversarial tests, and synchronized contract/spec statements because each directly closes R1–R7.
- Exclude provider loops, command execution, cancellation, cleanup artifacts, scheduler behavior, and roadmap state changes.

### Final Routing

- `evaluation_mode=isolated-reassessment`; both build and review closures are true; build/review scores are 2/2/2/2/2.
- Positive risks are `boundary_contract`, `concurrent_consistency`, `structured_interpretation`, and `variant_product`; `large_indivisible_context=false` because the contract and adversarial tests provide deterministic oracles.
- `review_rework_count=1`, `evidence_integrity_failure=true`, and recovery routing is required. Finalizer selected build lane `cloud`, grade `G10`, filename `PLAN-cloud-G10.md`; official review is `CODE_REVIEW-cloud-G10.md`. No capability gap or user-review dependency exists.

## Dependencies and Execution Order

1. Confirm packet 09 remains uniquely complete.
2. Repair and regenerate the transport contract before changing Edge/Node call sites.
3. Freeze request authority at Edge and validate/copy it at Node.
4. Replace unsafe/new filesystem calls and bounded-list behavior before synchronizing claims.
5. Prove bootstrap readiness/teardown and all adversarial regressions, then update contract/spec.

## Implementation Checklist

- [ ] Repair typed write and immutable request capability/limit wire semantics, regenerate bindings, and enforce Edge-to-Node narrowing with operation-aware catalog validation.
- [ ] Replace pre-effect, unbounded, and Go 1.25-only filesystem paths with Go 1.24 descriptor-relative no-follow bounded operations and permanent regression tests.
- [ ] Prove raw-free startup, before-ready validation, workspace-first teardown, adversarial guarantees, and synchronize contract/spec only after verification passes.
- [ ] Fill implementation-owned sections in `CODE_REVIEW-cloud-G10.md` with actual decisions, deviations, and uncached command output.

## Implementation Plan

### [REVIEW_API-1] Repair the wire and freeze request authority

**Problem**

- `proto/iop/runtime.proto:405` makes path and content mutually exclusive, and `apps/node/internal/node/workspace_handler.go:61` rejects every WRITE.
- `proto/iop/runtime.proto:383` does not transport the frozen operations, command ids, or limits, while `apps/node/internal/workspace/runtime.go:168` grants the request its catalog entry's full authority.
- Catalog validation at `apps/node/internal/workspace/runtime.go:155` requires unrelated limits even when their operation is disabled.

**Solution**

Before (`proto/iop/runtime.proto:397`):

```proto
message WorkspaceToolRequest {
  // identity fields
  oneof input {
    string relative_path = 6;
    bytes write_content = 7;
    string command_id = 8;
  }
}
```

After:

```proto
message WorkspaceWriteInput {
  string relative_path = 1;
  bytes content = 2;
}

message WorkspaceToolRequest {
  // Fields 1-9 remain wire-compatible.
  oneof input {
    string relative_path = 6;
    bytes write_content = 7; // legacy incomplete input; rejected for WRITE
    string command_id = 8;
    WorkspaceWriteInput write = 10;
  }
}
```

Add new `WorkspaceOpenRequest` fields for allowed operations, allowed command ids, and effective max read/write/output/command timeout. In `workspaceOpen`, construct a new request from the frozen binding and overwrite any incoming authority values. In `Runtime.Open`, validate every requested operation/id/limit against the selected catalog entry, copy the admitted values, and compare the entire copy for duplicate-open idempotence. Require a positive limit only when an enabled operation consumes it. The Node WRITE branch accepts only the structured input and calls `Runtime.Write`.

**Modified Files and Checklist**

- [ ] `proto/iop/runtime.proto` — structured write input and immutable open authority fields on new field numbers.
- [ ] `proto/gen/iop/runtime.pb.go` — regenerated Go bindings.
- [ ] `apps/client/lib/gen/proto/iop/runtime.pb.dart` — regenerated Dart message bindings.
- [ ] `apps/client/lib/gen/proto/iop/runtime.pbjson.dart` — regenerated Dart descriptors.
- [ ] `apps/edge/internal/service/workspace_wire.go` — derive the outbound open request exclusively from the frozen binding.
- [ ] `apps/edge/internal/service/workspace_wire_test.go` — prove overwrite/narrowing, command ids, and effective limits.
- [ ] `apps/node/internal/workspace/runtime.go` — operation-aware catalog validation and immutable request authority copy/subset checks.
- [ ] `apps/node/internal/workspace/runtime_test.go` — widening/lowering, read-only, command-only, duplicate, and copy tests.
- [ ] `apps/node/internal/node/workspace_handler.go` — dispatch structured WRITE and reject incomplete/legacy shapes.
- [ ] `apps/node/internal/node/workspace_handler_test.go` — write success/error and malformed-input mapping.
- [ ] `apps/node/internal/transport/parser_test.go` — cover the new protobuf input without weakening optional handler routing.

**Test Strategy**

- Generate both language bindings, round-trip a structured write, and ensure old field numbers remain unchanged.
- Mutate caller-provided open authority and prove Edge output still equals the frozen binding.
- Reject catalog/request widening, unknown command ids, over-limit values, conflicting duplicate authority, and incomplete writes; accept valid lowered read-only and command-only bindings.

**Verification**

- `make proto && make proto-dart`
- `go test -race ./apps/edge/internal/service ./apps/node/internal/workspace ./apps/node/internal/node ./apps/node/internal/transport -run 'Test(WorkspaceWire|RuntimeOpen|RuntimeCatalog|NodeWorkspace|NodeParserMapWorkspace)' -count=1`

### [REVIEW_API-2] Enforce no-follow effects and bounded listing at Go 1.24

**Problem**

- `apps/node/internal/workspace/path.go:101` mutates through `Root.MkdirAll` before validation; the fresh review reproducer observed a directory created through a rejected symlink parent.
- `apps/node/internal/workspace/file_executor.go:83` loads the entire directory with `ReadDir(-1)` before enforcing output bounds.
- `Root.MkdirAll` and `Root.Rename` are Go 1.25 APIs in a Go 1.24 module, so vet fails.

**Solution**

Before (`apps/node/internal/workspace/path.go:96`):

```go
if err := entry.root.MkdirAll(dir, 0700); err != nil {
    return errUnsafePath
}
_, err := checkedExisting(entry, dir, true, false)
```

After:

```go
parent, base, err := openOrCreateParentNoFollow(entry, name)
if err != nil { return errUnsafePath }
defer parent.Close()
// Create temp and rename relative to this validated parent descriptor.
```

Implement Unix descriptor-relative component walking with no-follow flags, per-component type/device validation, and `mkdirat` only after the parent descriptor is validated. Perform temp creation, fsync, and rename relative to the same opened directory. Other platforms remain fail closed. Keep target preservation and temp cleanup on every failure. Replace whole-directory listing with fixed-size batches and a bounded max-heap retaining only the lexically smallest `maxListEntries+1` candidates; sort the retained result and apply encoded-byte accounting without storage proportional to total directory size.

**Modified Files and Checklist**

- [ ] `apps/node/internal/workspace/path.go` — route parent validation/creation through descriptor-relative helpers with no pre-validation effect.
- [ ] `apps/node/internal/workspace/identity_unix.go` — Go 1.24-compatible no-follow open/mkdir/temp/rename primitives and identity checks.
- [ ] `apps/node/internal/workspace/identity_other.go` — fail-closed unsupported-platform helpers with matching signatures.
- [ ] `apps/node/internal/workspace/file_executor.go` — same-parent atomic writes and fixed-batch bounded lists.
- [ ] `apps/node/internal/workspace/file_executor_test.go` — permanent symlink/replaced-parent/no-effect, large-list, special-file, atomic-failure, and parallel-request tests.

**Test Strategy**

- Assert rejected symlink, mount/foreign-device substitute, special-file, and replaced-parent operations create or change nothing.
- Exercise more directory entries and encoded bytes than both caps and prove deterministic truncation with bounded retained state.
- Inject post-temp-write/pre-rename failure and prove the prior target remains byte-identical and no temp survives.
- Run parallel read/list/write/delete across sibling request roots under the race detector.

**Verification**

- `go test -race ./apps/node/internal/workspace -run 'Test(Runtime|FileExecutor)' -count=1`
- `go vet ./apps/node/internal/workspace ./apps/node/internal/node ./apps/node/internal/bootstrap`
- `GOOS=darwin GOARCH=arm64 go test -c -o /tmp/iop-workspace-files-darwin-followup.test ./apps/node/internal/workspace`

### [REVIEW_API-3] Prove startup redaction and lifecycle ordering

**Problem**

- `apps/node/internal/workspace/runtime.go:104` and line 118 wrap raw OS errors that can contain the configured root.
- `apps/node/internal/bootstrap/module.go:113` hardcodes process GOOS in composition, and the existing bootstrap test calls the workspace constructor directly rather than proving validation before ready.
- `runtimeOwner.close` closes the session before the workspace, while checked plan/spec claims and several adversarial guarantees lack evidence.

**Solution**

Before (`apps/node/internal/bootstrap/module.go:113`):

```go
workspaceRuntime, err := workspace.NewRuntime(result.Config.GetWorkspaces(), runtime.GOOS, logger)
```

After:

```go
workspaceRuntime, err := workspace.NewRuntime(
    result.Config.GetWorkspaces(), opts.hostOS(), logger,
)
```

Add a production-default host/composition option used by `connectRuntime` and overridden only by tests. Translate root open failures to stable path-free errors inside the workspace package. Add observable lifecycle seams/fakes that prove invalid catalog construction returns before `SignalReady`, valid construction installs the handler before ready, and close order is registry, workspace, session, store across ordinary close and reconnect replacement. Capture logger output with a unique root sentinel. Update contract/spec text only for behavior proven by the completed tests and keep command/cancel/cleanup explicitly deferred.

**Modified Files and Checklist**

- [ ] `apps/node/internal/workspace/runtime.go` — stable redacted startup errors.
- [ ] `apps/node/internal/workspace/runtime_test.go` — returned-error and logger sentinel assertions.
- [ ] `apps/node/internal/bootstrap/module.go` — injectable host/composition seam and workspace-before-session/store close order.
- [ ] `apps/node/internal/bootstrap/workspace_runtime_test.go` — actual ready/no-ready, handler installation, close order, reconnect ownership, and raw-free log tests.
- [ ] `agent-contract/inner/edge-node-runtime-wire.md` — document only the corrected write/open/file guarantees and retained deferrals.
- [ ] `agent-spec/runtime/edge-node-execution.md` — synchronize implemented entry points and exact evidence without overstating later packets.

**Test Strategy**

- Use a fake registered session and deterministic host override to exercise `connectRuntime` without a Mac or external Edge.
- Assert the exact event order and idempotent teardown under direct close and supervisor replacement.
- Use a unique root sentinel in failing configurations and require its absence from both returned errors and captured logs.

**Verification**

- `go test -race ./apps/node/internal/bootstrap ./apps/node/internal/node -run 'Test(WorkspaceRuntime|NodeWorkspace)' -count=1`
- `rg --sort path -n 'structured write|request authority|Go 1\.24|no-follow|bounded list|before ready|workspace.*before.*session|command.*defer|cleanup.*defer' agent-contract/inner/edge-node-runtime-wire.md agent-spec/runtime/edge-node-execution.md`

## Modified Files Summary

| File | Item |
|------|------|
| `proto/iop/runtime.proto` | REVIEW_API-1 |
| `proto/gen/iop/runtime.pb.go` | REVIEW_API-1 |
| `apps/client/lib/gen/proto/iop/runtime.pb.dart` | REVIEW_API-1 |
| `apps/client/lib/gen/proto/iop/runtime.pbjson.dart` | REVIEW_API-1 |
| `apps/edge/internal/service/workspace_wire.go` | REVIEW_API-1 |
| `apps/edge/internal/service/workspace_wire_test.go` | REVIEW_API-1 |
| `apps/node/internal/workspace/runtime.go` | REVIEW_API-1, REVIEW_API-3 |
| `apps/node/internal/workspace/runtime_test.go` | REVIEW_API-1, REVIEW_API-3 |
| `apps/node/internal/node/workspace_handler.go` | REVIEW_API-1 |
| `apps/node/internal/node/workspace_handler_test.go` | REVIEW_API-1 |
| `apps/node/internal/transport/parser_test.go` | REVIEW_API-1 |
| `apps/node/internal/workspace/path.go` | REVIEW_API-2 |
| `apps/node/internal/workspace/identity_unix.go` | REVIEW_API-2 |
| `apps/node/internal/workspace/identity_other.go` | REVIEW_API-2 |
| `apps/node/internal/workspace/file_executor.go` | REVIEW_API-2 |
| `apps/node/internal/workspace/file_executor_test.go` | REVIEW_API-2 |
| `apps/node/internal/bootstrap/module.go` | REVIEW_API-3 |
| `apps/node/internal/bootstrap/workspace_runtime_test.go` | REVIEW_API-3 |
| `agent-contract/inner/edge-node-runtime-wire.md` | REVIEW_API-3 |
| `agent-spec/runtime/edge-node-execution.md` | REVIEW_API-3 |
| `agent-task/m-iop-owned-single-request-agent-execution/10+09_workspace_files/CODE_REVIEW-cloud-G10.md` | REVIEW_API-1, REVIEW_API-2, REVIEW_API-3 |

## Final Verification

1. `test -f agent-task/m-iop-owned-single-request-agent-execution/09+08_workspace_wire/complete.log || test "$(compgen -G 'agent-task/archive/*/*/m-iop-owned-single-request-agent-execution/09+08_workspace_wire/complete.log' | wc -l)" -eq 1`
2. `make proto && make proto-dart`
3. `go test -race ./apps/node/internal/workspace -run 'Test(Runtime|FileExecutor)' -count=1`
4. `go test -race ./apps/edge/internal/service ./apps/node/internal/node ./apps/node/internal/bootstrap ./apps/node/internal/transport -run 'Test(WorkspaceWire|NodeWorkspace|WorkspaceRuntime|NodeParserMapWorkspace)' -count=1`
5. `go test ./apps/edge/internal/service ./apps/node/internal/workspace ./apps/node/internal/node ./apps/node/internal/bootstrap ./apps/node/internal/transport -count=1`
6. `go vet ./apps/edge/internal/service ./apps/node/internal/workspace ./apps/node/internal/node ./apps/node/internal/bootstrap ./apps/node/internal/transport`
7. `GOOS=darwin GOARCH=arm64 go test -c -o /tmp/iop-workspace-files-darwin-followup.test ./apps/node/internal/workspace`
8. `make client-test`
9. `rg --sort path -n 'structured write|request authority|Go 1\.24|no-follow|bounded list|before ready|workspace.*before.*session|command.*defer|cleanup.*defer' agent-contract/inner/edge-node-runtime-wire.md agent-spec/runtime/edge-node-execution.md`
10. `gofmt -d apps/edge/internal/service/workspace_wire.go apps/edge/internal/service/workspace_wire_test.go apps/node/internal/workspace/runtime.go apps/node/internal/workspace/runtime_test.go apps/node/internal/workspace/path.go apps/node/internal/workspace/identity_unix.go apps/node/internal/workspace/identity_other.go apps/node/internal/workspace/file_executor.go apps/node/internal/workspace/file_executor_test.go apps/node/internal/node/workspace_handler.go apps/node/internal/node/workspace_handler_test.go apps/node/internal/transport/parser_test.go apps/node/internal/bootstrap/module.go apps/node/internal/bootstrap/workspace_runtime_test.go && git diff --check`

Expected: the predecessor remains uniquely complete; regenerated bindings preserve existing field numbers; caller authority cannot widen; structured write succeeds; containment rejects before effects; list memory is bounded; all race, regression, vet, Darwin, client, documentation, formatting, and whitespace gates pass. Cached tests are not acceptable.

**After completing all code changes, fill every implementation-owned section in `CODE_REVIEW-cloud-G10.md`.**
