Dispose subprocess descendants after leader exit

docs/internal/adapters.md

@@ -57,14 +57,17 @@ configured filesystem secrets before adapter initialization.
 - Runtime adapter errors propagate to stage code and then manifest failure handling.
 - Subprocess adapters persist stage logs/generated configs through stage-managed paths.
 - Shared subprocess execution starts an owned process group on Linux/macOS or a
-  kill-on-close job object on Windows. Cancellation and deadlines request
-  termination, use a bounded forceful fallback, and wait for the leader before
-  returning. Child environments contain only the execution baseline and
-  adapter-specified values; configured credentials are explicit sensitive
-  values. Stdout and stderr are redacted while streaming into separate 8 MiB
-  diagnostic captures; a bounded wait closes a stream retained by a departed
-  leader's descendant. Reaching either limit terminates the owned tree.
-  Unsupported platforms reject owned command execution.
+  kill-on-close job object on Windows. Every terminal path disposes of that
+  owned tree before returning. After a natural leader exit, Unix checks for
+  remaining group members and uses bounded graceful then forceful termination;
+  Windows closes the job so kill-on-close applies. Cancellation, deadlines, and
+  diagnostic limits use the same terminal disposal path without losing their
+  original result classification. Child environments contain only the execution
+  baseline and adapter-specified values; configured credentials are explicit
+  sensitive values. Stdout and stderr are redacted while streaming into separate
+  8 MiB diagnostic captures; a bounded wait closes a stream retained by a
+  departed leader's descendant. Unsupported platforms reject owned command
+  execution.
 
 ## Implementation And Tests
 

docs/roadmap/implementation.md

@@ -55,7 +55,7 @@ the full audit or any audit line range.
 | 31 | Enforced repository-wide CI/release validation and streamlined redundant test matrices. | TST-012, TST-015 | Completed |
 | 32 | Reconciled lifecycle/analyze documentation and closed the original audit traceability inventory. | COM-002, COM-005 | Completed |
 | 33 | Confine diagnostic log destinations and eliminate pathname-based tail reads. | Follow-up review | Completed |
-| 34 | Dispose of owned subprocess descendants after natural leader exit. | Follow-up review | Pending |
+| 34 | Dispose of owned subprocess descendants after natural leader exit. | Follow-up review | Completed |
 | 35 | Bound remote current-state and lock control-plane reads. | Follow-up review | Pending |
 
 Completed stages must not be reimplemented wholesale. A pending stage may adjust
@@ -243,7 +243,7 @@ suite repeatedly, shuffled, and under `-race`. Cross-build the affected packages
 for Linux, macOS, and Windows; run native platform tests only where runners are
 actually available.
 
-**Status:** Pending.
+**Status:** Completed.
 
 ## Stage 35 — Bound remote current-state and lock control-plane reads