commit 0bb39ebe93918341f348efc3651f40ada5afde66
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Oct 1 08:05:57 2026 -0300

add(metadata/{md5-cache/app-editors/zed-1.24.0_pre20261001, md5-cache/app-misc/zeo-systray-0.2.1, md5-cache/dev-python/conda-26.9.0, md5-cache/dev-util/ai-memory-2.5.2, md5-cache/dev-util/ai-memory-bin-2.5.2, md5-cache/dev-util/mesa_clc-26.3.0_pre20261001, md5-cache/media-libs/mesa-26.3.0_pre20261001, md5-cache/media-libs/vulkan-layers-1.4.363_p20261001, md5-cache/net-misc/postman-bin-12.30.5, md5-cache/net-p2p/bisq-bin-1.10.9, md5-cache/sci-ml/ik_llama-cpp-0_pre20261001, md5-cache/sci-ml/llama-swap-261, md5-cache/sys-apps/ai-jail-2.5.0, md5-cache/sys-apps/ai-jail-bin-2.5.0}), mod(.autoupdate/packages.toml), up(app-editors/zed-1.24.0_pre20260930 -> 1.24.0_pre20261001, dev-python/conda-26.7.3 -> 26.9.0, dev-util/ai-memory{,-bin}-2.5.0 -> 2.5.2, media-libs/{mesa-26.3.0_pre20260930 -> 26.3.0_pre20261001, vulkan-layers-1.4.363_p20260930 -> 1.4.363_p20261001}, net-misc/postman-bin-12.30.4 -> 12.30.5, net-p2p/bisq-bin-1.10.8 -> 1.10.9, sci-ml/{ik_llama-cpp-0_pre20260930 -> 0_pre20261001, llama-swap-260 -> 261}, sys-apps/ai-jail{,-bin}-2.4.0 -> 2.5.0)

commit c1787b478187140e4b4439f3c363d13e3c35c30f
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Sep 30 23:15:13 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.37.7, md5-cache/app-editors/kiro-1.2.4, md5-cache/app-editors/zed-1.24.0_pre20260930, md5-cache/app-editors/zed-bin-1.22.0, md5-cache/app-editors/zed-bin-1.23.1_pre, md5-cache/dev-util/ai-memory-2.5.0, md5-cache/dev-util/ai-memory-bin-2.5.0, md5-cache/dev-util/antigravity-hub-bin-2.19.1.6046815158665216, md5-cache/dev-util/claude-code-2.1.286, md5-cache/dev-util/cline-bin-3.0.67, md5-cache/dev-util/codex-0.159.3, md5-cache/dev-util/codex-bin-0.159.3, md5-cache/dev-util/codex-desktop-bin-26.928.31416, md5-cache/dev-util/copilot-cli-bin-1.0.90, md5-cache/dev-util/glslang-1.4.363.0_p20260930, md5-cache/dev-util/openchamber-bin-2.1.0, md5-cache/dev-util/opencode-bin-1.18.34, md5-cache/media-libs/harfbuzz-14.5.1, md5-cache/net-analyzer/netdata-2.12.0, md5-cache/sci-ml/lemonade-2026.40.0, md5-cache/sci-ml/lemonade-bin-2026.40.0, md5-cache/sys-apps/ai-jail-2.4.0, md5-cache/sys-apps/ai-jail-bin-2.4.0, md5-cache/www-client/brave-browser-1.96.60}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.37.6 -> 2.37.7, app-editors/{kiro-1.1.70 -> 1.2.4, zed-1.23.0_pre20260930 -> 1.24.0_pre20260930, zed-bin-1.21.0 -> 1.22.0, zed-bin-1.22.0_pre -> 1.23.1_pre}, dev-util/{ai-memory{,-bin}-2.4.2 -> 2.5.0, codex{,-bin}-0.159.2 -> 0.159.3}, media-libs/harfbuzz-14.5.0 -> 14.5.1, net-analyzer/netdata-2.11.1 -> 2.12.0, sci-ml/lemonade{,-bin}-2026.39.1 -> 2026.40.0, sys-apps/ai-jail{,-bin}-2.2.1 -> 2.4.0, www-client/brave-browser-1.96.59 -> 1.96.60)

commit 18a1d5231402209b57714f25b3488cbb3ddaed69
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Sep 29 19:52:43 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.37.6, md5-cache/dev-db/sqlitebrowser-3.13.99_p20260929, md5-cache/dev-games/godot-4.8_alpha7, md5-cache/dev-python/openai-3.22.0, md5-cache/dev-python/uv-bin-0.12.21, md5-cache/dev-util/ai-memory-2.4.2, md5-cache/dev-util/ai-memory-bin-2.4.2, md5-cache/dev-util/claude-code-2.1.285, md5-cache/dev-util/codex-0.159.1, md5-cache/dev-util/codex-bin-0.159.1, md5-cache/dev-util/codex-desktop-bin-26.928.20755, md5-cache/dev-util/gemini-cli-0.62.0, md5-cache/dev-util/vulkan-utility-libraries-1.4.364_p20260929, md5-cache/media-libs/vulkan-loader-1.4.364_p20260929, md5-cache/sys-apps/pnpm-12.8.1, md5-cache/www-client/chromium-154.0.8037.92, md5-cache/www-client/servo-0.6.0}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.37.5 -> 2.37.6, dev-db/sqlitebrowser-3.13.99_p20260927 -> 3.13.99_p20260929, dev-games/godot-4.8_alpha6-r1 -> 4.8_alpha7, dev-python/{openai-3.20.0 -> 3.22.0, uv-bin-0.12.20 -> 0.12.21}, dev-util/{ai-memory{,-bin}-2.4.1 -> 2.4.2, codex{,-bin}-0.159.0 -> 0.159.1}, media-libs/vulkan-loader-1.4.364_p20260925 -> 1.4.364_p20260929, sys-apps/pnpm-12.6.0 -> 12.8.1, www-client/{chromium-154.0.8037.57 -> 154.0.8037.92, servo-0.5.0 -> 0.6.0})

commit 732cd0d9fc1b746fcd1d950f90db3d21a00ea266
Author: lucascouts <lucascs@protonmail.com>
Date: Fri Sep 25 22:01:04 2026 -0300

add(sys-firmware/{intel-microcode-20260812_p20260813, intel-microcode-20260925_p20260813}), add(metadata/{md5-cache/app-admin/awscli2-2.37.4, md5-cache/app-admin/doctl-1.175.0, md5-cache/app-containers/runc-1.5.2, md5-cache/app-editors/trilium-0.106.0, md5-cache/dev-util/ai-memory-2.4.1, md5-cache/dev-util/ai-memory-bin-2.4.1, md5-cache/dev-util/claude-code-2.1.283, md5-cache/dev-util/codex-desktop-bin-26.924.20706, md5-cache/dev-util/kilocode-bin-7.8.1, md5-cache/media-libs/meshoptimizer-1.3, md5-cache/net-misc/postman-bin-12.29.5}), mod(.autoupdate/packages.toml), up(app-admin/{awscli2-2.37.3 -> 2.37.4, doctl-1.174.0 -> 1.175.0}, app-containers/runc-1.5.1 -> 1.5.2, app-editors/trilium-0.105.0 -> 0.106.0, dev-util/ai-memory{,-bin}-2.4.0 -> 2.4.1, media-libs/meshoptimizer-1.2 -> 1.3, net-misc/postman-bin-12.29.4 -> 12.29.5)

commit 88ae17449744e1fd068e56f9b778a84648480aa3
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Sep 21 21:11:41 2026 -0300

add(metadata/{md5-cache/dev-util/ai-memory-2.4.0, md5-cache/dev-util/ai-memory-bin-2.4.0}), mod(.autoupdate/packages.toml), up(dev-util/ai-memory{,-bin}-2.3.2 -> 2.4.0)

commit 161db6e3ea3108b6fbd2ccbfbd52efccfe929807
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Sep 21 03:58:47 2026 -0300

autoupdate: apply the 2026-09-20/21 batch and sweep the md5-cache orphans

up(dev-db/sqlitebrowser-3.13.99_p20260916 -> 3.13.99_p20260920,
dev-util/{ai-memory,ai-memory-bin}-2.3.1 -> 2.3.2,
dev-util/antigravity-hub-bin-2.15.0.6576870427328512 -> 2.15.1.5880727900913664,
dev-util/mesa_clc-26.3.0_pre20260919 -> 26.3.0_pre20260920,
dev-util/qwen-code-0.24.1 -> 0.24.2, media-libs/harfbuzz-14.4.0 -> 14.5.0,
media-libs/mesa-26.3.0_pre20260919 -> 26.3.0_pre20260920,
net-misc/modemmanager-1.25.95_p20260908 -> 1.25.95_p20260920,
sci-ml/ik_llama-cpp-0_pre20260919 -> 0_pre20260920)

The applier had left the whole batch in the tree uncommitted, together with the
md5-cache entry of every previous version: a bump writes the new entry and never
removes the old one. egencache re-run over the ten packages swept 18 orphans,
eight of them older than this batch (mesa and mesa_clc back to _pre20260917,
ik_llama-cpp likewise, qwen-code 0.24.0, antigravity-hub-bin 2.14.0). The floor
for that section of scripts/gentoo-parity.sh is 0, not a backlog.

Verified: every one of the ten new md5-cache entries has an _md5_ matching its
ebuild, and egencache touched nothing outside the ten packages named.
The sys-libs/libunwind record moves 1.8.3 -> 1.8.3-r1 to follow the revbump
already committed in 486b2487c.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

commit cc5bb86636f61f6b58a0b053e599e5f7c6793cbb
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Sep 17 22:25:23 2026 -0300

bump 24 packages; fix the tlottie/telegram-desktop static-link pin

Batch autoupdate sweep, plus three things the applier could not have done
on its own.

tlottie/telegram-desktop -- the proposed bump was wrong.
The autoupdate offered tlottie 0.1.0_pre20260908. Telegram v7.2.9's
prepare.py pins commit 31f1b542f8, dated 2026-09-11, and v7.2.9 newly
applies tlottie.patch from desktop-app/patches (pinned there at
519aaa0846). tlottie is linked STATICALLY into the Telegram binary, so a
wrong pin is an ABI mismatch with no soname to catch it. Bumped to
0.1.0_pre20260911 with files/tlottie-tdesktop-compat.patch (six hunks over
three files; verified with both `git apply --check` and eapply's own flag
set against a real checkout of the pinned commit), and revbumped
telegram-desktop to 7.2.9-r1 with the matching floor.

check-tlottie-pin.sh had a false negative.
Its detector anchored the category right after leading whitespace, so any
version-range prefix made the atom invisible and it reported "declares no
dependency on media-libs/tlottie". Widened the detector rather than
dropping the floor: the floor is the only thing that forces a rebuild on
someone who already has the old archive installed, precisely because the
linkage is static. Self-test grew 17 -> 23 assertions covering bare,
floored and slotted atoms as matches, and comment, blocker and
prefix-lookalike as non-matches.

uutils-coreutils-bin 0.12.0 changed its documentation source.
Upstream dropped the architecture-independent docs.tar.zst and now ships a
`uudoc` binary beside the payload. The ebuild derives the applet list from
`coreutils --list` and renders man pages and completions through uudoc,
which means the build host must be able to execute the target binary --
src_install dies with an explicit message when it cannot. Verified by
running the payload: all 106 applets render a man page and bash, zsh and
fish completions with no failure, and the completion sed anchors still
match.

dev-db/redis returns as an ahead-of-::gentoo mirror.
It was removed on 2026-09-07 because the ::gentoo ebuild had gained a zstd
USE flag this copy lacked. That is no longer true: the ebuild here is
byte-identical to ::gentoo's 8.10.1, zstd included, one release ahead at
8.10.2. The record carries the condition that closes it again -- drop it
once ::gentoo ships >=8.10.2.

Carried forward deliberately, not re-derived from a stale base:
mt7927-dkms -r1 (MT6639 BT firmware ungated from USE=btmtk, needed because
the kernel's own btmtk wants it) and nvidia-cuda-toolkit -r1 (GCC_MAX 15
-> 16, CLANG_MAX 21 -> 22, two targets/ globs fixed to ${narch} for
arm64/sbsa).

Verification, all local:
- pkgcheck on the 20 touched packages: no finding that is not also present
on the previous version.
- check-tlottie-pin.sh exits 0 (was 1); check-slot-naming-contract.sh and
check-autoupdate-damage.sh exit 0.
- gentoo-parity.sh: 0 ALIGN, 0 packages behind ::gentoo, [missing] 0,
[digest] 0, [orphans] 4 (the documented floor), and [cache] back from 14
to 0 -- the stale entries were the killed applier's leftovers.
- md5-cache _md5_ matches the ebuild md5sum for all 25 new ebuilds.

Nothing was merged or compiled: this host has no sudo and Portage reads
/var/db/repos/bentoo, not the checkout. The evidence above is fetch-and-
hash, static analysis and running the uutils payload -- not a build.

Pre-existing and left alone, outside this batch's scope:
sys-power/upower-1.91.4 installs a systemd unit with no OpenRC counterpart
(check-openrc-coverage.sh FAIL, from commit 43e3f0617), and
mail-client/thunderbird{,-l10n}-156.0 account for the sweep's remaining
2 UNDOCUMENTED and 1 REDUNDANT rows.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

commit cd631aeb82cf3004b6097b922f3342a3f5d4b7bf
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Sep 16 18:34:40 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.36.47, md5-cache/app-editors/devin-desktop-bin-3.10.31, md5-cache/app-editors/vim-9.2.1116, md5-cache/app-editors/vim-core-9.2.1116, md5-cache/app-editors/zed-1.22.0_pre20260916, md5-cache/app-editors/zed-bin-1.20.1, md5-cache/app-editors/zed-bin-1.21.0_pre, md5-cache/dev-util/ai-memory-2.3.0, md5-cache/dev-util/ai-memory-bin-2.3.0, md5-cache/dev-util/glslang-1.4.357.0_p20260916, md5-cache/dev-vcs/trufflehog-3.97.5, md5-cache/net-analyzer/netdata-2.11.1, md5-cache/net-libs/nodejs-26.9.0, md5-cache/net-p2p/bisq-bin-1.10.8, md5-cache/www-client/brave-browser-1.95.102}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.36.46 -> 2.36.47, app-editors/{devin-desktop-bin-3.10.27 -> 3.10.31, vim-9.2.1112 -> 9.2.1116, vim-core-9.2.1112 -> 9.2.1116, zed-1.21.0_pre20260916 -> 1.22.0_pre20260916, zed-bin-1.19.2 -> 1.20.1, zed-bin-1.20.1_pre -> 1.21.0_pre}, dev-util/ai-memory{,-bin}-2.2.2 -> 2.3.0, dev-vcs/trufflehog-3.97.4 -> 3.97.5, net-analyzer/netdata-2.11.0 -> 2.11.1, net-libs/nodejs-26.8.2 -> 26.9.0, net-p2p/bisq-bin-1.10.7 -> 1.10.8, www-client/brave-browser-1.95.101 -> 1.95.102)

commit de48d8fcbbbce386807b348f366ed6197c5827b2
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Sep 15 23:30:37 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.36.46, md5-cache/app-editors/vim-9.2.1112, md5-cache/app-editors/vim-core-9.2.1112, md5-cache/app-misc/claude-desktop-bin-2.110.0, md5-cache/dev-games/godot-4.8_alpha6, md5-cache/dev-python/openai-3.14.1, md5-cache/dev-util/ai-memory-2.2.2, md5-cache/dev-util/ai-memory-bin-2.2.2, md5-cache/dev-util/antigravity-hub-bin-2.14.0.5449404535144448, md5-cache/dev-util/claude-code-2.1.273, md5-cache/dev-util/gemini-cli-0.60.0, md5-cache/dev-util/glslang-1.4.357.0_p20260915, md5-cache/dev-util/kilocode-bin-7.7.2, md5-cache/dev-util/spirv-tools-1.4.357.0_p20260915, md5-cache/dev-vcs/gitkraken-12.5.0, md5-cache/media-libs/vulkan-layers-1.4.362_p20260916, md5-cache/media-libs/vulkan-loader-1.4.362_p20260915, md5-cache/sci-ml/ollama-bin-0.34.1}), del(mail-client/{betterbird-bin-153.2.0, proton-mail-bin-1.14.0}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.36.45 -> 2.36.46, app-editors/{vim, vim-core}-9.2.1108 -> 9.2.1112, app-misc/claude-desktop-bin-1.52386.6 -> 2.110.0, dev-games/godot-4.8_alpha5 -> 4.8_alpha6, dev-python/openai-3.14.0 -> 3.14.1, dev-util/ai-memory{,-bin}-2.2.1 -> 2.2.2, dev-vcs/gitkraken-12.4.1 -> 12.5.0, media-libs/{vulkan-layers-1.4.362_p20260915 -> 1.4.362_p20260916, vulkan-loader-1.4.362_p20260911 -> 1.4.362_p20260915}, sci-ml/ollama-bin-0.34.0 -> 0.34.1)

commit 822445a14c78a4ac476c4d963e0bd3997cdf3717
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Sep 13 07:47:23 2026 -0300

add(metadata/{md5-cache/dev-db/sqlitebrowser-3.13.99_p20260913, md5-cache/dev-util/ai-memory-2.2.1, md5-cache/dev-util/ai-memory-bin-2.2.1, md5-cache/dev-util/spirv-tools-1.4.357.0_p20260912, md5-cache/dev-util/vulkan-utility-libraries-1.4.362_p20260913, md5-cache/media-libs/vulkan-layers-1.4.362_p20260913, md5-cache/sys-apps/ai-jail-1.21.0, md5-cache/sys-apps/ai-jail-bin-1.21.0}), mod(.autoupdate/packages.toml), up(dev-db/sqlitebrowser-3.13.99_p20260908 -> 3.13.99_p20260913, dev-util/ai-memory{,-bin}-2.2.0 -> 2.2.1, media-libs/vulkan-layers-1.4.362_p20260912 -> 1.4.362_p20260913, sys-apps/ai-jail{,-bin}-1.20.3 -> 1.21.0)

commit 83eab793b8ba89f6d655b200a5e9ecc896b245cd
Author: lucascouts <lucascs@protonmail.com>
Date: Sat Sep 12 13:36:49 2026 -0300

add(metadata/{md5-cache/app-editors/cursor-3.20.17, md5-cache/app-editors/zed-1.21.0_pre20260912, md5-cache/dev-util/ai-memory-2.2.0, md5-cache/dev-util/ai-memory-bin-2.2.0, md5-cache/dev-util/crush-bin-0.94.1, md5-cache/media-libs/vulkan-layers-1.4.362_p20260912, md5-cache/sys-kernel/linux-firmware-20260912}), mod(.autoupdate/packages.toml), up(app-editors/{cursor-3.20.14 -> 3.20.17, zed-1.21.0_pre20260911-r2 -> 1.21.0_pre20260912}, dev-util/ai-memory{,-bin}-2.1.2 -> 2.2.0, media-libs/vulkan-layers-1.4.362_p20260911 -> 1.4.362_p20260912, sys-kernel/linux-firmware-20260911 -> 20260912)

commit de10fa0208dea2e042ed3c695f5494619350d8cd
Author: lucascouts <lucascs@protonmail.com>
Date: Fri Sep 11 20:04:41 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.36.44, md5-cache/app-editors/devin-desktop-bin-3.10.23, md5-cache/app-editors/vim-9.2.1074, md5-cache/app-editors/vim-core-9.2.1074, md5-cache/app-misc/claude-desktop-bin-1.52386.3, md5-cache/dev-lang/flutter-3.47.4, md5-cache/dev-python/tavily-python-0.8.2, md5-cache/dev-util/ai-memory-2.1.2, md5-cache/dev-util/ai-memory-bin-2.1.2, md5-cache/dev-util/antigravity-hub-bin-2.13.0.6362815968182272, md5-cache/dev-util/cc-switch-bin-3.20.3, md5-cache/dev-util/claude-code-2.1.269, md5-cache/dev-util/codex-desktop-bin-26.908.40834, md5-cache/dev-util/glslang-1.4.357.0_p20260911, md5-cache/dev-util/spirv-tools-1.4.357.0_p20260911, md5-cache/media-libs/vulkan-layers-1.4.362_p20260911, md5-cache/net-misc/postman-bin-12.27.7, md5-cache/sys-apps/ai-jail-1.20.3, md5-cache/sys-apps/ai-jail-bin-1.20.3}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.36.43 -> 2.36.44, app-editors/{devin-desktop-bin-3.9.19 -> 3.10.23, vim-9.2.1067 -> 9.2.1074, vim-core-9.2.1067 -> 9.2.1074}, app-misc/claude-desktop-bin-1.52386.0 -> 1.52386.3, dev-lang/flutter-3.47.3-r1 -> 3.47.4, dev-python/tavily-python-0.8.1 -> 0.8.2, dev-util/ai-memory{,-bin}-2.1.1 -> 2.1.2, media-libs/vulkan-layers-1.4.362_p20260910 -> 1.4.362_p20260911, net-misc/postman-bin-12.27.6 -> 12.27.7, sys-apps/ai-jail{,-bin}-1.20.2-r1 -> 1.20.3)

commit 5649e84b39590caadec8bc415b684b6e92b992f7
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Sep 8 17:01:05 2026 -0300

add(metadata/{md5-cache/app-editors/vim-9.2.1048, md5-cache/app-editors/vim-core-9.2.1048, md5-cache/app-misc/claude-desktop-bin-1.49585.0, md5-cache/dev-db/sqlcipher-4.19.0, md5-cache/dev-python/openai-3.9.0, md5-cache/dev-util/ai-memory-2.1.1, md5-cache/dev-util/ai-memory-bin-2.1.1, md5-cache/dev-util/spirv-tools-1.4.357.0_p20260908, md5-cache/kde-plasma/spectacle-6.7.5, md5-cache/net-misc/modemmanager-1.25.95_p20260908, md5-cache/sys-apps/bleachbit-6.0.4}), mod(.autoupdate/packages.toml), up(app-editors/{vim, vim-core}-9.2.1046 -> 9.2.1048, app-misc/claude-desktop-bin-1.46388.4 -> 1.49585.0, dev-db/sqlcipher-4.18.0 -> 4.19.0, dev-python/openai-3.8.0 -> 3.9.0, dev-util/ai-memory{,-bin}-2.1.0 -> 2.1.1, kde-plasma/spectacle-6.7.4-r1 -> 6.7.5, net-misc/modemmanager-1.25.95_p20260904 -> 1.25.95_p20260908, sys-apps/bleachbit-6.0.3 -> 6.0.4)

commit 0e18e8d8e321be1c56b35d16578c00cc3676d25a
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Sep 7 13:46:44 2026 -0300

add(dev-util/{ai-memory-2.1.0,ai-memory-bin-2.1.0}, acct-user/ai-memory-0, acct-group/ai-memory-0), mod(.autoupdate/packages.toml): package akitaonrails/ai-memory, source and prebuilt, OpenRC in both scopes

ai-memory is a local-first long-term memory MCP server for AI coding agents.
Upstream ships a Rust workspace and Linux release binaries for x86_64 and
aarch64, so both a from-source and a prebuilt package are keyworded
~amd64 ~arm64 -- the -bin is not amd64-only the way sys-apps/ai-jail-bin is,
because here upstream publishes an aarch64 asset.

Upstream installs two systemd units, one system and one user. Both get an
OpenRC counterpart at the same scope, neither gated behind USE=systemd, and
each script names what the translation loses rather than pretending parity:
the system unit's PrivateTmp, ProtectHome, ProtectSystem=strict and
ReadWritePaths have nothing in OpenRC to map onto. scripts/check-openrc-
coverage.sh reports PASS on both packages, system and user scope.

The account comes from acct-user/ai-memory + acct-group/ai-memory (uid/gid
602, continuing this overlay's own run above ::gentoo's highest assignment)
rather than from upstream's sysusers.d drop-in, which is deliberately not
installed. The pair is in DEPEND as well as RDEPEND: src_install runs
`fowners root:ai-memory`, which resolves against the BUILD host's account
database.

Two defects found by building the image rather than reading the ebuild:

* doins -r forces 0644, and 80 of the 162 hook scripts ship 0755 and are
EXEC'd by the agents. Measured: 80 executable in the tarball, 0 after a
doins -r. They are installed with cp -a instead.
* `newsystemduserunit` does not exist -- the helper is systemd_newuserunit.
Bash prints "command not found", the phase still exits 0, and the user
unit simply never lands. Verified present in the image after the fix.

src_test runs `--lib --tests`, not upstream's `--bin ai-memory`: that target
carries test = false, so the phase passed having run zero tests. The real
suite is 846 unit tests plus 110 in tests/suite, all passing under
FEATURES=test. Doctests stay out because one of them is a `docker run` shell
snippet in a plain ``` block that rustdoc tries to compile as Rust -- an
upstream defect in a doc comment, reproducible outside Portage.

No USE flag for the LLM crate's local-embeddings feature. It is default-on
upstream and cannot be cleared from a `-p ai-memory-cli` build: the workspace
inheritance rejects `default-features = false` on the member, and the call
sites are not cfg-gated. Nothing is forced hardware-wise either -- it is
pure-Rust CPU inference with no CUDA, ROCm, SYCL or Metal in the graph.

The 490 crates come from a tarball this overlay generates and hosts
(distfiles.obentoo.org), following dev-util/codex: inline CRATES built fine
but drew Portage's "very large number of CRATES" notice and put 151 KiB of
DIST lines in the Manifest, now 626 bytes. Nothing produces that tarball
automatically, so the ebuild carries the exact regeneration commands and the
autoupdate record repeats that a bump is incomplete without them.

Validated on this host without root, with the four unprivileged-install
overrides: full `ebuild clean install` for both packages, image contents
compared file by file, and `FEATURES=test` for the source. Ownership of the
installed files is NOT verified -- fowners is a logged no-op under an
unprivileged build.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>