• R1 (2026-10-01): 12 reviewers, 2 Nit, 7 P3, 8 P4, COMMENT. Review
• R2 (2026-10-02): 13 reviewers, 3 Nit, 9 P3, 12 P4, COMMENT. Review
• R3 (2026-10-02): 11 reviewers, 5 Nit, 12 P3, 16 P4, COMMENT. Review
• R4 (2026-10-03): 12 reviewers, 8 Nit, 12 P3, 18 P4, COMMENT. Review
• R5 (2026-10-03): 11 reviewers, 10 Nit, 13 P3, 24 P4, COMMENT. Review
• R6 (2026-10-06): 12 reviewers, 11 Nit, 14 P3, 32 P4, COMMENT. Review
• R7 (2026-10-06): 13 reviewers, 12 Nit, 17 P3, 39 P4, COMMENT. Review
• R8 (2026-10-06): 13 reviewers, 15 Nit, 19 P3, 45 P4, COMMENT. Review
• R9 (2026-10-07): 14 reviewers, 17 Nit, 19 P3, 53 P4, COMMENT. Review

Finding inventory: PR #29320

Findings

Contested and acknowledged

CRF-11 (P3, agent/proto/agent.proto:107) - plugins_supported name vs experiment state

• Finding: plugins_supported names a capability, but its value is the experiment state; a v2.13 coderd with the experiment off stored plugin resources yet sent false. Proposed renaming to plugins_enabled before release.
• Author defense: coderd now drops plugin resources and plugin_name data when the experiment is off (CRF-8 fix), so false means this coderd will not store plugin data. That is the condition the finding itself said would make the current name accurate. The proto comment is now one condition. Name kept.
• Panel closure (R2, 1/1): Gon, the agent that raised it (same agent, resumed), verified PushContextState drops plugin data with the experiment off (context.go:136-139, DropsPluginDataWithoutExperiment passes), so false now means coderd will not store plugin data, matching the name.

CRF-18 (P4, codersdk/deployment.go:5519) - experiment description promises unshipped behavior

• Finding: The ExperimentAgentPlugins description says plugin skills appear in chats and plugin MCP servers run, but at this head enabling it only sets Manifest.plugins_supported. Proposed describing what this PR does, or adding the constant in the PR that adds agent discovery.
• Author defense: The seven PRs land as one stack behind the experiment; the description is what operators see once the stack is in. The experiment is off by default and not in ExperimentsSafe, so a partial release exposes nothing unless someone opts in.
• Panel closure (R2, 6/6): Mafu-san, Ryosuke, Mafuuu, Gon, Leorio, Chopper (each the agent that raised it, resumed) accepted. Consequence of the defended text: on a release cut mid-stack, an operator who opts in by name sees no behavior change and no error. Accepted because the experiment is off by default and absent from ExperimentsSafe, and enabling it at this head only sets a manifest flag.

CRF-4 (P4, agent/proto/agent_drpc_old.go:117) - unused 2.12/2.13 client interfaces

• Finding: ConnectRPC213WithRole and DRPCAgentClient213 have no caller.
• Author defense: Removed ConnectRPC213WithRole; kept DRPCAgentClient213 to match the convention that main defines DRPCAgentClient212 with no ConnectRPC212.
• Panel re-raised (R2): Netero (new agent; the R1 Netero agent was not resumed because Netero ran as the first pass before the dispute check-in) re-raised. Orchestrator verified: on base 0f78361 and origin/main, agent_drpc_old.go ends at DRPCAgentClient211, and every interface 2.0 to 2.11 has a ConnectRPC2x caller. The PR adds DRPCAgentClient212, so the convention claim is not supported.

Law analysis

Not run. Effective additions 168 (threshold 1000).

Round log

Round 1

Full panel (round 1). Netero first pass: 1 P3, 4 P4, 2 Note, no P0, panel proceeded. Panel: ging-go, melody, ryosuke, knuckle, kurapika, pariston, mafuuu, bisky, gon, leorio, mafu-san, chopper (wildcard). Size 12: multi-domain (proto wire format, Go, coderd ingress of agent-supplied data). Result: 7 P3, 8 P4, 2 Nit, 3 Note (body), 2 OOS, 3 dropped. CRF-9 and CRF-10 downgraded from Gon P2 to P3: comment-only, the consequence depends on a future change. Keep-argument recorded: next developer adding a variant without a gate breaks every context push on older coderd. CRF-12 set to P4: the interface has no methods and version.go holds the full changelog. Reviewed against 0d12256..b500f10.

Round 2

Restructure round (new migration files 000612 added; effective additions 168 to 357). Churn guard PROCEED: 15 fixed, CRF-11 and CRF-18 contested; CRF-4 defense re-raised by Netero after orchestrator found its convention claim unsupported. Dispute check-in: gon, mafu-san, ryosuke, mafuuu, leorio, chopper resumed from R1 agents. CRF-11 closed 1/1, CRF-18 closed 6/6. Full panel: ging-go, melody, ryosuke, knuckle, kurapika, pariston, mafuuu, bisky, gon, leorio, mafu-san, chopper, plus wildcard zoro (13; chopper is a contested persona, outside the size target). Netero R2 is a new agent. New: 2 P3, 4 P4, 1 Nit, 2 Note (body). Reviewed against 0f78361..10dbcb0.

Round 3

Fix round (no files added; effective additions 357 to 489; changes address R2 findings). Churn guard PROCEED: 8 fixed (CRF-4, CRF-26 to CRF-32), none contested. Panel (new agents): gon, bisky, ryosuke, leorio, zoro, mafuuu, chopper, knuckle (raisers of findings whose code changed), ging-go, melody (specialists for changed Go and proto wire files), wildcard knov. New: 3 P3, 4 P4, 2 Nit; 2 Note (body), 1 OOS. Melody's routing-name P3 moved to out of scope (consumers in unchanged chatd and agent code; extends CRF-24). Gon P2 comment findings downgraded: CRF-41 to P4 (wording ambiguity, code is correct), CRF-42 to Nit; keep-argument recorded: duplicated rule lists drift. Most new findings come from the CRF-29 fix (withoutShadowedPluginServers). Reviewed against 0f78361..2be2785.

Round 4

Fix round (4 files changed; no files added; effective additions unchanged at 489). Churn guard PROCEED: CRF-35 to CRF-43 fixed. Panel (new agents): ryosuke, zoro, chopper, leorio, mafuuu, knuckle, bisky, knov, gon (raisers), ging-go, melody (specialists), wildcard meruem. New: 2 P4, 3 Nit, 1 Note (body), 2 OOS; 3 Gon findings dropped (CRF-52 keep-argument: two rule lists can drift; dropped because the author applied the fix offered and each list matches its function). Gon P2 on PluginBody downgraded to Nit (comment duplication, no behavior). Reviewed against 0f78361..825f9e6.

Round 5

Fix round (branch squashed; diff 825f9e6..938caef touches 4 files, no files added). Churn guard PROCEED: CRF-47 to CRF-51 fixed. Panel (new agents): chopper, leorio, mafuuu, knov, meruem, gon (raisers), ging-go, melody (specialists), ryosuke, bisky (policy layering and new tests), wildcard razor. New: 1 P3, 7 P4, 2 Nit, 2 Note (body). CRF-58 raised from six P4s to P3: consequence chain with CRF-56 (a malformed orphan is accepted, then fixing the manifest makes the same push reject, and the agent retry loop stops context sync until restart). Gon P2s on comments downgraded to Nit (wording, no behavior). Reviewed against 0f78361..938caef.

Round 6

Fix round (diff 938caef..8397708 touches 4 files; adds proto field plugin_source tag 5 as part of the CRF-60 fix; effective additions 577 to 758). Churn guard PROCEED: CRF-58 to CRF-66 fixed. Netero (advisory): 3 P4. Panel (new agents): mafuuu, knov, meruem, chopper, bisky, razor, melody, leorio, gon, ryosuke (raisers), ging-go (specialist), wildcard kite. New: 1 P3 (seven reviewers converged, reproduced), 8 P4, 1 Nit. CRF-71 (PR description) has no file line; listed in the review body. Gon P2 on test-helper comments downgraded to Nit. Reviewed against 0f78361..8397708.

Correction: CRF-71 was posted as an inline comment on tailnet/proto/version.go:95 (post requires every open finding inline), not in the review body.

Round 7

Fix round (diff 8397708..4494299; no files added). Churn guard PROCEED: CRF-69 to CRF-78 fixed. Netero advisory: 2 P4, 1 Note (not posted: fixture style). Panel (new agents): mafuuu, knov, meruem, chopper, bisky, razor, melody, ryosuke, leorio, gon (raisers), ging-go, kurapika (specialists: input bounds, path prefix), wildcard zoro. New: 3 P3, 7 P4, 1 Nit, 2 Note (body). CRF-81 is a fix-chain regression: the CRF-69 cap removal (our round-6 advice) plus the CRF-74 log fields left plugin_source unbounded; convergence of four reviewers set P3 (amplification runs before the version gate). CRF-83 (structural: delete plugin_source) would also remove CRF-81 and CRF-84. Meruem's push.go:150 out-of-scope item is CRF-56, not re-added. Reviewed against 0f78361..4494299.

Round 8

Fix round (diff 4494299..f64e456; plugin_source removed, skip replaced by rejection; effective additions 831 to 661). Churn guard PROCEED: CRF-79 to CRF-89 fixed. Netero advisory: 1 P4. Panel (new agents): kurapika, knov, razor, chopper, meruem, zoro, bisky, ryosuke, leorio, gon (raisers), ging-go, melody (specialists), wildcard kite. New: 2 P3, 7 P4, 3 Nit, 1 Note (body), 1 OOS. CRF-93 is the remaining half of CRF-81 (other uncapped fields reach errors), six reviewers, P3. Gon P2 on proto wording merged into CRF-95 at P4. Zoro P4 on test duplication downgraded to Nit. Reviewed against 0f78361..f64e456.

Round 9

Fix round (branch rebased onto b4fb790; migration renumbered to 000614; withoutPluginData replaced by in-loop drop; collectOKPlugins added). Churn guard PROCEED: CRF-92 to CRF-102 fixed. Netero advisory: 1 P4, 1 Note (DRPCAgentClient213 belongs in agent PR; not posted). Panel (new agents): leorio, kurapika, razor, chopper, meruem, kite, gon, bisky, melody, zoro, ryosuke (raisers), ging-go, knuckle (specialists; migration renumbered), wildcard takumi (distilled set exhausted). New: 8 P4, 2 Nit. No P3: CRF-93 bound verified by five reviewers and a <4096 test. Gon P2s downgraded (comment wording): CRF-106 merged with Razor at P4, CRF-111 to Nit; CRF-113 merges two Gon P4s. Reviewed against b4fb790..ff177d1.

CRF = Coder Review Finding (P0-P4, Nit, Note)