PR #24321 native permission verification

Baseline: github/main 80a2351fcb909034e65a512dfabeb3cdfd367762
Candidate: de53726a9c (full SHA in PR)
Native OpenCode 1.19.5, real SDK and T3 provider adapter, isolated HOME/config/data.
A local OpenAI-compatible recording endpoint returned text completions and recorded the tool definitions actually offered by OpenCode. No real paid model or installed client was used.
Each run uses one native session across review, resumed review, and cleared selection.
The separate automatic title-generation request has no tools and is excluded.

BEFORE
{
  "revision": "main-80a2351fcb",
  "opencode": "1.19.5",
  "nativeId": "ses_e6fb3e32dffe23ckVO1Yb1YFmy",
  "turns": [
    {
      "turn": "review",
      "tools": [
        "bash",
        "edit",
        "glob",
        "grep",
        "question",
        "read",
        "skill",
        "task",
        "todowrite",
        "webfetch",
        "write"
      ]
    },
    {
      "turn": "review resumed",
      "tools": [
        "bash",
        "edit",
        "glob",
        "grep",
        "question",
        "read",
        "skill",
        "task",
        "todowrite",
        "webfetch",
        "write"
      ]
    },
    {
      "turn": "selection cleared",
      "tools": [
        "bash",
        "edit",
        "glob",
        "grep",
        "question",
        "read",
        "skill",
        "task",
        "todowrite",
        "webfetch",
        "write"
      ]
    }
  ]
}

AFTER
{
  "revision": "de53726a9c",
  "opencode": "1.19.5",
  "nativeId": "ses_e6fb16ce8ffeIWJJFwX4Dn6qYZ",
  "turns": [
    {
      "turn": "review",
      "tools": [
        "glob",
        "grep",
        "read"
      ]
    },
    {
      "turn": "review resumed",
      "tools": [
        "glob",
        "grep",
        "read"
      ]
    },
    {
      "turn": "selection cleared",
      "tools": [
        "bash",
        "edit",
        "glob",
        "grep",
        "question",
        "read",
        "skill",
        "task",
        "todowrite",
        "webfetch",
        "write"
      ]
    }
  ]
}

Regression proof through Blacksmith:
- Retained selected-agent adapter case fails against baseline production adapter: bash/write/task/MCP write allowed rather than read only.
- Extended native-child case fails before the followup fix: task action allow instead of deny.
- Extended explicit resume-selection case fails before the followup fix: bash deny instead of allow after clearing selection.
- Final adapter suite: 38 passed. Orchestrator replay suite: 22 passed.

Not verified: other OpenCode versions this turn; installed-client delegate_task; live plan-agent execution; desktop/mobile/remote/tunnel clients. No UI source changed.