[Bakobiibizo]

Changes

Prepare agentctl 0.1.5 with native OpenRouter-compatible Chat Completions profiles and fixes from the library audit.

Linux captures now use dedicated subreaper supervisors. Descendants remain owned after session changes, environment clearing, or early exit, while unrelated host children and concurrent captures are preserved. Windows workers join Job Objects before executing, and detached supervisors no longer keep caller output pipes open.

Failed foreground runs retain JSON reports and their exit codes. External summaries and status log reads are bounded, detached job IDs are unique, and embedding applications can specify the supervisor executable. Discovery, Core compatibility, and durable error capture from current main are preserved.

Validation

• dev fix and dev ci pass locally on Windows, including all-target Clippy and 55 tests after integration with current main.
• The integrated Linux suite passes 62 tests locally, including cleared environments, early-exit zombies, concurrent captures, active-run orphan reaping, host SIGKILL, and capture transfer between threads. Hosted CI passes on Linux, macOS, and Windows at commit 615bc3d: https://github.com/hydra-dynamix/agentctl/actions/runs/38076024175.
• Foreground and detached requests succeeded against an operator-provided live compatible endpoint using qwen3.6:latest; generated config/job/log files contained no API key. No endpoint address or credential is committed.

Linux supervision requires pidfd support (Linux 5.3+) and procfs. It is process lifecycle management, not a sandbox for hostile commands. Detailed findings and evidence are in docs/audit-2026-10-10.md.