Bind runtime and descriptor cleanup to exact retry leases and retain command supervisors until stop is confirmed. Preserve primary errors, partial Evidence and finalization cancellation reasons. Validate with 88 focused tests, official WABT 1.0.42 CLI/MCP verifier (51 cases), build, static and documentation checks. Command stop failures use controlled source seams; real permission failures and target execution are unverified. Fixes #4787 Fixes #4798
WABT producer fixtures
module.wat is source-owned. WABT 1.0.42 wat2wasm module.wat -o module.wasm
produced the binary used for wasm-objdump -h -x module.wasm (objdump.txt) and
wasm2wat --enable-all module.wasm (decoded.wat). No binary is checked in.
The module has an imported function, exported memory/function and a test
custom section. The custom payload is retained as an @custom annotation in decoded WAT.
Upstream tag commit: ff0ef7e0009402740c805a9744c09b05be063e48.
The separate real-tool verifier generates its own fixtures with caller-supplied
WABT and compares exact producer output against the public CLI/MCP surfaces.
custom-names.wat covers newlines, quotes, Unicode, backslashes, embedded
section markers and NUL in custom names; objdump displays those names without
escaping and ends each at its first NUL.
It also covers leading U+FEFF, including a name distinct from the special name
section, and distinguishes a U+FEFF-only name from an empty name.