[firstmate#1238] feat: add host-root supervision with native Windows support

[github-actions]

Decision needed - firstmate#1238

CI approval by YrFnS · needs-ci-approval

feat: add host-root supervision with native Windows support

Situation

• Compliance: none
• Tests: none
• Freshness: complete target observation as of 2026-08-04T00:04:44Z
• Notes: compliance=none tests=none

Warning

This PR changes CI-execution files (<could-not-list-all-files - failing closed>); approving would run the PR's OWN workflow/action code, so it is held for manual review.

Security review (advisory)

Note

Automated, read-only summary of the workflow/action changes in this fork PR - advisory, untrusted context only. It does not approve CI; the security hold still requires your own review of the diff.

Could not analyze the workflow/action changes automatically - review the diff manually. Approval stays held either way.

Your decision

Tick one box for a quick call, or reply with a slash-command (/approve-ci, /close, /decline <reason>, /hold, /comment <text>):

• Approve the CI run (security-gated)
• Close / decline
• Hold - I'll handle this manually

_{Only the repository owner can drive this decision - everyone else's edits and comments are ignored.}

[github-actions]

Agent triage event finished with consumer.committed.primary.output.schema_invalid.

[github-actions]

Agent schema-repair event finished with consumer.committed.

[github-actions]

Triage result projected.

[github-actions]

[github-actions]

Self-healed by the scheduled backstop: firstmate#1238 no longer needs a maintainer decision in the current scan - consuming this card.