[P3.33] Low-severity correctness batch: checkpoint restore, supervisor cache keys, waiver attribution, opencode argv, execution duration, gitpython lock

[frankbria]

Problem.

• Checkpoint restore. It writes raw statuses (checkpoints.py:208-216), which revives MERGED tasks and strands live runs. It also reports the snapshot's task count instead of the rows actually updated.
• Supervisor cache. conductor.py:200 uses substring keys (pip matches 'pipeline') and a process-global cache, so unrelated blockers get auto-answered.
• Waiver attribution. CLI waivers record approved_by="cli-user" (proof_commands.py:514), while pr merge --override records getpass.getuser().
• opencode argv. The opencode adapter still puts the prompt in argv (opencode.py:182), where ps shows it; [P2.5] Fix adapter/engine correctness: editor ambiguity bypass, pytest SKIP detection, kilocode process handling, denylist gaps #955 fixed this for kilocode.
• Execution duration. The execution page shows 'complete in 0s' because CompletionEvent(duration_seconds=0) is emitted (react_agent.py:1390) and the page has no test.
• gitpython. uv.lock:1146 pins gitpython 3.1.59, which is in the Docker image. Its Actor ReDoS is reachable via /api/v2/git/commits.

Acceptance criteria.

• Restore refuses MERGED tasks and tasks with an active run, and reports rowcount.
• The supervisor cache is per workspace and uses word-boundary matching.
• Waivers record getpass.getuser().
• opencode always sends the prompt on stdin.
• A real duration is emitted, or 0 is treated as unknown.
• gitpython>=3.1.60 and the lock is refreshed.

---

Severity: low · area: core/cli/web · source: SaaS launch review 2026-09-25 (plan in tasks/todo.md).