Backlog 4: runners logged 3110dc5bea4c

- 2026-10-01 04:00 **Items 8 and 9.** Review requests (oxygenhub#68, deployed, run #65 passes): ask someone to review on the page or through the API, notified, answered by their review, the author told of every review. The organisation webhooks page and hub-side landing through the delegate key already existed: plan items ticked, as were `oxy seal --proposal` and `oxy proposal show|land` in oxygen's plan. CHANGELOG.md for oxygen, oxygenhub and oxygenflow. Email verification, password reset (SMTP) and passkeys left for Andy, as the backlog says.

- 2026-10-01 05:15 **P5 started.** Design in the hub spec (13.3, oxygenhub#69) and the OxygenFlow spec (5.1, oxygenflow#21): a state is mounted from its state index, text files as renderings cached by graph key, opaque files as blobs; the editor runs in a microVM on a runner and commits go to a workspace bookmark signed by the hub as the user's delegate. **P5a prototype** (`flow-casfs`, 42236046): on the Linux tip, on a loaded Earth, mount 0.5 to 0.9 s, first read 0.1 s, cold full read 52 s, warm 0.65 s, identical to the working copy under `diff -r`. To do for the targets: several FUSE threads, bounded memory, read-ahead, a lazy state index. The Flow image is rebuilt with fuser vendored and pinned in all three repositories. P5b (Open in Workspace) is next, but its microVM image (openvscode-server) and the hub proxy are a large piece that is better started with Andy's eye on the design.