주인 파일은 닫힌 채로 실패해

# Coop's compatibility client: owner discovery, routing, the direct-SQL refusal
# (trimmed excerpt)

def owner_config():
    path = Path(os.environ.get("PIPPA_COOP_OWNER_FILE", str(db_path()) + ".owner.json"))
    if not path.exists():
        return None
    config = json.loads(path.read_text())
    if config.get("mode") != "service" or Path(config["database"]).resolve() != db_path().resolve():
        raise OwnerUnavailable("Invalid Coop owner configuration")
    return config


def routed(fn):
    @wraps(fn)
    def call(*args, **kwargs):
        config = None if context.active() else owner_config()
        return remote(fn.__name__, args, kwargs, config) if config else fn(*args, **kwargs)
    return call


def connect() -> sqlite3.Connection:
    borrowed = context.connection()
    if borrowed is not None:
        return borrowed
    if owner_config() is not None:
        raise OwnerUnavailable("Direct SQL is disabled; use the Coop service API")
    ...

# Coop's compatibility client: one call to the owner (trimmed excerpt)

def remote(name, args, kwargs, config):
    token_path = Path(config["token_file"])
    if token_path.stat().st_mode & 0o077:
        raise OwnerUnavailable("Coop credential must be private (0600)")
    payload = {"method": name, "args": args, "kwargs": kwargs,
               "key": str(uuid.uuid4()),
               "metadata": {k: context.metadata(k) for k in ("id", "model", "reasoning", "session", "host")}}
    # Record the request ID before crossing the process boundary. Receipts contain
    # input hashes, not private bodies or credentials. Reconcile this ID on outage.
    receipt = {"key": payload["key"], "method": name, "state": "uncertain",
               "input_sha256": hashlib.sha256(json.dumps(payload, sort_keys=True, default=encode).encode()).hexdigest()}
    ...  # created exclusively, mode 0600, flushed and fsync'd before the request

    try:
        # Do not retry a request with an uncertain HTTP outcome.
        with urllib.request.urlopen(req, timeout=30) as response:
            result = json.loads(response.read(), object_hook=decode)
    except urllib.error.HTTPError as exc:
        ...  # no domain verdict: 4xx settles "rejected", 5xx stays uncertain
             # "Coop refused the request (HTTP {code}): ..."
             # "Coop owner failed (HTTP {code}); reconcile request <key>"
    except (OSError, ValueError) as exc:
        raise OwnerUnavailable("Coop owner unavailable; no local write attempted; reconcile request "
                               + payload["key"]) from exc
    ...
    settle("rejected" if "error" in result else "committed")