--- before
+++ after
@@ -34,7 +34,6 @@
 config_wrapper=$script_dir/advisor-config.sh
 live_config=$plugin_dir/advisor.toml
 models=$plugin_dir/models.json
-settings_schema=$plugin_dir/settings.schema.json
 readme=$repo_dir/README.md
 notice=$repo_dir/NOTICE.md
 license=$repo_dir/LICENSE
@@ -43,331 +42,16 @@
 walkthrough=$repo_dir/docs/advisor-1.4-walkthrough.md
 release_notes=$repo_dir/docs/release-notes-draft.md
 package_test=$repo_dir/public-release/test_candidate_package.py
+verify_dir=$repo_dir/tests/verify
 
-for file in "$manifest" "$marketplace" "$terra_role" "$sol_role" "$astra_role" "$skill" "$ui" "$operations" "$fixtures" "$installer" "$inspector" "$parent_inspector" "$transport" "$response_schema" "$audit" "$evaluator" "$config_test" "$transport_test" "$usage_test" "$cli_test" "$process_helper" "$config_helper" "$config_wrapper" "$live_config" "$models" "$settings_schema" "$model_doc" "$walkthrough" "$release_notes" "$package_test" "$readme" "$notice" "$license"; do
+for file in "$manifest" "$marketplace" "$terra_role" "$sol_role" "$astra_role" "$skill" "$ui" "$operations" "$fixtures" "$installer" "$inspector" "$parent_inspector" "$transport" "$response_schema" "$audit" "$evaluator" "$config_test" "$transport_test" "$usage_test" "$cli_test" "$process_helper" "$config_helper" "$script_dir/advisor_state.py" "$script_dir/advisor_catalog.py" "$script_dir/advisor_settings.py" "$script_dir/advisor_journal.py" "$script_dir/advisor_discovery.py" "$script_dir/advisor_canary.py" "$script_dir/advisor_doctor.py" "$config_wrapper" "$live_config" "$models" "$model_doc" "$walkthrough" "$release_notes" "$package_test" "$readme" "$notice" "$license" "$plugin_dir/LICENSE" "$plugin_dir/NOTICE.md" "$verify_dir/contract-docs.sh" "$verify_dir/installer.sh" "$verify_dir/inspectors.sh" "$verify_dir/transport.sh" "$verify_dir/audit.sh" "$verify_dir/evaluator.sh" "$verify_dir/release-docs.sh"; do
   [ -f "$file" ] || fail "missing required file: $file"
 done
 [ "$(find "$plugin_dir/agents" -maxdepth 1 -type f -name '*.toml' | wc -l | tr -d ' ')" -eq 3 ] || fail "expected exactly three active roles"
 [ "$(find "$plugin_dir/skills" -type f -name SKILL.md | wc -l | tr -d ' ')" -eq 1 ] || fail "expected exactly one skill"
 pass "required inventory: one skill, three model pins including explicit opt-in Astra, read-only transport, parent/child inspectors, evaluator, documentation"
 
-jq -e '
-  .type == "object" and .additionalProperties == false and
-  .required == ["recommendation", "why", "strongest_objection", "change_my_mind", "acceptance_checks", "risks", "follow_up_areas"] and
-  (.properties | keys | sort) == (["recommendation", "why", "strongest_objection", "change_my_mind", "acceptance_checks", "risks", "follow_up_areas"] | sort) and
-  all(.properties.recommendation, .properties.why, .properties.strongest_objection, .properties.change_my_mind, .properties.risks, .properties.follow_up_areas; .type == "string") and
-  .properties.acceptance_checks.type == "array" and .properties.acceptance_checks.minItems == 1 and
-  .properties.acceptance_checks.items == {"type":"string"}
-' "$response_schema" >/dev/null || fail "response schema contract mismatch"
-[ ! -L "$response_schema" ] || fail "response schema must not be a symlink"
-pass "strict seven-field response schema"
-
-python3 - "$manifest" "$marketplace" "$terra_role" "$sol_role" "$astra_role" "$fixtures" "$ui" "$models" "$live_config" <<'PY'
-import json, re, sys, tomllib
-from pathlib import Path
-manifest=json.loads(Path(sys.argv[1]).read_text())
-market=json.loads(Path(sys.argv[2]).read_text())
-terra=tomllib.loads(Path(sys.argv[3]).read_text())
-sol=tomllib.loads(Path(sys.argv[4]).read_text())
-astra=tomllib.loads(Path(sys.argv[5]).read_text())
-cases=json.loads(Path(sys.argv[6]).read_text())
-ui=Path(sys.argv[7]).read_text()
-models=json.loads(Path(sys.argv[8]).read_text())
-live=tomllib.loads(Path(sys.argv[9]).read_text())
-version=manifest.get("version","")
-if manifest.get("name")!="advisor" or version!="1.4.6": raise SystemExit("manifest identity/version")
-if "homepage" in manifest or "repository" in manifest: raise SystemExit("unowned upstream metadata remains")
-author_name=manifest.get("author",{}).get("name","")
-if author_name!="David Schmidt / Zero Delta LLC": raise SystemExit("plugin developer identity")
-if manifest.get("skills")!="./skills/" or any(k in manifest for k in ("hooks","apps","mcpServers")): raise SystemExit("unsupported plugin components")
-interface=manifest.get("interface",{})
-if {key: interface.get(key) for key in ("websiteURL","privacyPolicyURL","termsOfServiceURL")} != {"websiteURL":"https://zerodelta.dev/advisor/","privacyPolicyURL":"https://zerodelta.dev/advisor/privacy/","termsOfServiceURL":"https://zerodelta.dev/advisor/terms/"}: raise SystemExit("manifest URL fields")
-if "Project importance, security adjacency, or an ordinary architecture question alone stays Standard." not in interface.get("longDescription",""): raise SystemExit("manifest routing caveat")
-if "supportURL" in interface: raise SystemExit("unsupported support URL field")
-if models.get("transport_contract_version")!="1.4" or models.get("tested_codex_cli")!="codex-cli 0.153.2": raise SystemExit("model transport provenance")
-if models.get("defaults")!={"standard":{"model":"gpt-5.6-terra","effort":"high"},"specialist":{"model":"gpt-6-sol","effort":"high"}}: raise SystemExit("model defaults")
-if live != {"standard":{"model":"gpt-5.6-terra","effort":"high"},"specialist":{"model":"gpt-6-sol","effort":"high"}}: raise SystemExit("live config defaults")
-if any("codex_cli_version_pattern" in (item.get("compatibility_baseline") or {}) for item in models.get("models", [])): raise SystemExit("CLI version eligibility pin")
-if {item.get("model") for item in models.get("models",[])} != {"gpt-5.6-terra","gpt-6-sol","gpt-6-astra"}: raise SystemExit("model catalog inventory")
-entry=market.get("plugins",[])
-if market.get("name")!="advisor" or market.get("interface",{}).get("displayName")!="Codex Advisor": raise SystemExit("marketplace identity")
-if len(entry)!=1 or entry[0].get("name")!="advisor" or entry[0].get("source")!={"source":"local","path":"./plugins/advisor"}: raise SystemExit("marketplace source")
-if entry[0].get("policy")!={"installation":"AVAILABLE","authentication":"ON_INSTALL"} or not entry[0].get("category"): raise SystemExit("marketplace policy")
-pairs=((terra,{"name":"advisor-terra","description":"Standard fresh, read-only advisor for material technical decisions and generic advisor requests.","model":"gpt-5.6-terra","model_reasoning_effort":"high","sandbox_mode":"read-only"}),(sol,{"name":"advisor-sol","description":"Specialist fresh, read-only advisor for narrowly qualified unresolved critical decisions.","model":"gpt-6-sol","model_reasoning_effort":"high","sandbox_mode":"read-only"}),(astra,{"name":"advisor-astra","description":"Explicit opt-in, fresh, read-only advisor for higher-usage technical consultations.","model":"gpt-6-astra","model_reasoning_effort":"high","sandbox_mode":"read-only"}))
-for role,pins in pairs:
-    if any(role.get(k)!=v for k,v in pins.items()): raise SystemExit("role pins")
-    if not all(isinstance(role.get(k),str) and role[k].strip() for k in ("description","developer_instructions")): raise SystemExit("role text")
-    required=("Use zero tools.", "Do not call any tool or function", "inspect files or repositories", "browse, fetch, or search the web", "independent", "FOLLOW-UP AREAS", "research-first", "Do not spawn or route another agent")
-    if any(phrase not in role["developer_instructions"] for phrase in required): raise SystemExit("role zero-tool contract")
-items=cases.get("cases",[])
-if len(items)!=14 or len({c.get("id") for c in items})!=14: raise SystemExit("fixture inventory")
-counts={k:sum(c.get("class")==k for c in items) for k in ("consult","skip","boundary")}
-if counts!={"consult":6,"skip":4,"boundary":4}: raise SystemExit(f"fixture classes {counts}")
-if any(c.get("expected") not in ("consult","skip") or not c.get("prompt") for c in items): raise SystemExit("fixture fields")
-risks={k:sum(c.get("risk")==k for c in items) for k in ("standard","specialist")}
-if risks!={"standard":10,"specialist":4}: raise SystemExit(f"fixture risk tiers {risks}")
-if {c["id"] for c in items if c.get("risk")=="specialist"}!={"consult-security","boundary-high-risk","consult-unresolved-compatibility","consult-competing-diagnoses"}: raise SystemExit("specialist fixture scope")
-if "allow_implicit_invocation: true" not in ui or "interface:" not in ui or "policy:" not in ui: raise SystemExit("UI YAML contract")
-print("structured files valid")
-PY
-pass "manifest, marketplace, live TOML, YAML, and 6/4/4 evaluator fixtures"
-
-for phrase in \
-  'ordinary bounded material architecture' 'interface' 'data-model' 'compatibility' \
-  'cross-module' 'competing diagnoses' 'security' 'privacy' 'authorization' \
-  'migration' 'recovery' 'irreversible-state' 'explicit advisor' \
-  'factual/status/summarization' 'mechanical edits' 'formatting/renaming/docs synchronization' \
-  'settled-plan execution' 'final review owned elsewhere' 'no-delegation' 'borderline case'; do
-  grep -Fqi "$phrase" "$skill" || fail "skill description/contract omits: $phrase"
-done
-skill_header=$(sed -n '1,3p' "$skill")
-for phrase in 'authorization' 'challenge' 'second-opinion' 'architecture-review'; do
-  printf '%s\n' "$skill_header" | grep -Fqi "$phrase" || fail "skill selection vocabulary omits: $phrase"
-done
-for document in "$skill" "$operations" "$repo_dir/SPEC.md"; do
-  for phrase in 'targeted evidence' 'leaves unresolved' 'compatibility or concurrency' 'competing diagnosis'; do
-    grep -Fqi "$phrase" "$document" || fail "routing contract omits: $phrase: $document"
-  done
-done
-for phrase in 'ADVISOR DECISION' 'route: consult | skip | unavailable' 'inspect-parent-runtime.sh' 'CODEX_THREAD_ID' 'CODEX_SESSION_ID' 'run-advisor.sh' \
-  '--role advisor-terra' '--role advisor-sol' 'actual resolved model and effort metadata' \
-  'Standard consultation' 'Specialist consultation' 'generic advisor requests' \
-  'unresolved security or trust boundary' 'irreversible migration or data-loss decision' \
-  'credible unresolved High-severity disagreement' 'Security adjacency or project importance alone' \
-  'borderline choice uses Standard' 'parent model and sandbox are irrelevant' \
-  'DECISION' 'CONTEXT' 'OPTIONS' 'BOUNDARIES' 'REQUEST' \
-  'ADVISOR RESPONSE' 'RECOMMENDATION:' 'WHY:' 'STRONGEST OBJECTION:' 'CHANGE MY MIND:' \
-  'ACCEPTANCE CHECKS:' 'RISKS:' 'FOLLOW-UP AREAS:' 'research-first' 'accept' 'modify' 'reject' 'advisor unavailable' \
-  'ADVISOR CALL' 'status: running' 'ADVISOR RESULT' 'status: completed | unavailable' \
-  'tier: Standard | Specialist' 'model: <resolved model selector>' \
-  'model: <verified resolved model selector>' 'effort: <verified resolved effort>' \
-  'isolation: read-only' 'recommendation: <concise recommendation, or unavailable>' \
-  'decision: accept | modify | reject | blocked' 'recommendation: unavailable' \
-  'decision: blocked' 'distinct Codex consultation thread remains the inspectable detailed record' \
-  'Before consultation, the root performs any repository or web research' \
-  'relevant evidence and source references' 'enough relevant evidence' \
-  'Use zero tools: do not inspect files, call tools, fetch' 'research-first next step' \
-  'specific missing evidence' 'FOLLOW-UP AREAS' 'outside this consultation' \
-  'unavailable result cannot be rescued' 'accepts the returned technical recommendation or' \
-  'research-first plan, never a technical choice' \
-  'sandbox_permissions: require_escalated' 'Do not first try' \
-  'nested Codex app-server' 'elevation applies only to the fixed launcher' \
-  'absolute installed plugin root' 'regular, nonsymlinked files' \
-  'Never elevate a repository-relative or' 'workspace-resolved `plugins/advisor` script' \
-  "<<'ADVISOR_PACKET'" 'Never use `< packet.txt`' 'unquoted heredoc' \
-  '`eval`' 'shell-interpolated' 'workspace-writable file' \
-  'post-response inspection proves' 'same-session' 'wrong-model' 'wrong-effort' \
-  'non-read-only' 'tool-use evidence'; do
-  grep -Fq -- "$phrase" "$skill" || fail "consultation contract omits: $phrase"
-done
-for document in "$operations" "$repo_dir/SPEC.md"; do
-  grep -Fqi 'repository or web research' "$document" || fail "root-research contract missing: $document"
-  grep -Fqi 'source references' "$document" || fail "source-reference contract missing: $document"
-  grep -Fqi 'zero-tool' "$document" || fail "zero-tool contract missing: $document"
-  grep -Fqi 'non-read-only' "$document" || fail "non-read-only block contract missing: $document"
-  grep -Fqi 'FOLLOW-UP AREAS' "$document" || fail "follow-up contract missing: $document"
-  grep -Fqi 'research-first' "$document" || fail "research-first contract missing: $document"
-  grep -Fqi 'outside' "$document" || fail "outside-consultation boundary missing: $document"
-  grep -Fqi 'unavailable result cannot be rescued' "$document" || fail "unavailable rescue prohibition missing: $document"
-  grep -Fqi 'require_escalated' "$document" || fail "escalated launcher boundary missing: $document"
-  grep -Fqi 'nested Codex app-server' "$document" || fail "nested app-server boundary missing: $document"
-  grep -Eqi 'installed[- ]plugin' "$document" || fail "installed root boundary missing: $document"
-  grep -Fqi 'workspace-resolved' "$document" || fail "workspace-script elevation refusal missing: $document"
-  grep -Fqi 'single-quoted' "$document" || fail "quoted packet boundary missing: $document"
-  grep -Fqi 'workspace-writable' "$document" || fail "workspace packet refusal missing: $document"
-  grep -Fqi 'Codex home' "$document" || fail "private transport root missing: $document"
-done
-# The skill sentence must stay on one physical line; grep '.*' does not span newlines.
-grep -Eq 'non-Codex.*route: unavailable' "$skill" || fail "non-Codex unavailable route missing from skill"
-pass "non-Codex surfaces document the unavailable route"
-
-for document in "$skill" "$repo_dir/SPEC.md" "$operations"; do
-  grep -Fqi 'completion consultation' "$document" || fail "completion-consultation contract missing: $document"
-done
-# Gate the rule itself, not the frontmatter restatement of it: the description alone
-# must not be able to satisfy this check.
-grep -Fq 'Emit a second `ADVISOR DECISION`' "$skill" || fail "skill omits the completion-consultation rule"
-grep -Fq 'Complex work is about to be declared complete' "$repo_dir/SPEC.md" || fail "SPEC omits the completion trigger condition"
-grep -Fqi 'takes one completion consultation before it is declared complete' "$operations" || fail "operations omits the completion-consultation rule"
-if grep -Fqi 'completion consultation is a final diff review' "$skill"; then fail "completion consultation must not claim final review"; fi
-pass "complex work takes one completion consultation that never becomes final review"
-
-python3 - "$skill" "$operations" "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md" <<'PY'
-import sys
-from pathlib import Path
-
-skill, operations, spec, invariants = (
-    Path(path).read_text(encoding="utf-8") for path in sys.argv[1:]
-)
-ownership = "The root owns architecture, implementation routing, verification, and acceptance."
-legacy_ownership = "The root remains architect, implementer-or-router, verifier, and acceptor."
-evidence_workers = (
-    "The root may assign bounded evidence gathering to separate research workers before "
-    "assembling the decision packet; the consulted advisor still uses zero tools and "
-    "never delegates."
-)
-if ownership not in skill or ownership not in spec:
-    raise SystemExit("root ownership sentence missing from skill or SPEC")
-if legacy_ownership in skill or legacy_ownership in spec:
-    raise SystemExit("legacy root ownership sentence remains")
-if (
-    "the advisor to recommend a path.\n\n"
-    + evidence_workers
-    + "\n\nIf that evidence cannot settle the question,"
-) not in skill:
-    raise SystemExit("skill evidence-worker paragraph placement changed")
-if (
-    "tools: it does not inspect files, fetch the web, or conduct independent research.\n\n"
-    + evidence_workers
-) not in operations:
-    raise SystemExit("operations evidence-worker paragraph placement changed")
-if f"{evidence_workers}\n\n### INV-12 — Redacted deferred audit" not in invariants:
-    raise SystemExit("INVARIANTS evidence-worker paragraph placement changed")
-print("ownership and bounded evidence-worker documentation exactness valid")
-PY
-pass "root ownership and bounded evidence-worker documentation parity"
-
-[ -s "$compat_doc" ] || fail "public directory compatibility document missing or empty: $compat_doc"
-python3 - "$compat_doc" <<'PY'
-import re
-import sys
-from pathlib import Path
-
-text = Path(sys.argv[1]).read_text(encoding="utf-8")
-if not re.search(r"^OWNER DECISION:\s*(pending|approved|rejected)\s*$", text, re.MULTILINE):
-    raise SystemExit("owner decision line missing or not one of pending/approved/rejected")
-supported = ("Codex CLI", "Codex desktop")
-unsupported = ("Generic ChatGPT with no local Codex runtime", "Native Codex subagents", "MCP servers and hosted services")
-for surface in supported:
-    if not re.search(r"\|\s*" + re.escape(surface) + r"\s*\|\s*Supported\s*\|", text):
-        raise SystemExit(f"compatibility matrix does not mark supported: {surface}")
-for surface in unsupported:
-    if not re.search(r"\|\s*" + re.escape(surface) + r"\s*\|\s*Unsupported\b", text):
-        raise SystemExit(f"compatibility matrix does not mark unsupported: {surface}")
-PY
-pass "public directory compatibility document: owner decision recorded and Codex CLI/desktop vs. non-Codex/subagent/MCP verdicts intact"
-python3 - "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md" "$skill" "$operations" <<'PY'
-import re
-import sys
-from pathlib import Path
-
-allowlist = re.compile(r"allowlisted\s+`?codex_exec`?\s+or\s+`?Codex Desktop`?\s+provenance", re.IGNORECASE)
-for filename in sys.argv[1:]:
-    if not allowlist.search(Path(filename).read_text(encoding="utf-8")):
-        raise SystemExit(f"exact runtime provenance allowlist missing: {filename}")
-PY
-pass "exact codex_exec or Codex Desktop provenance allowlist documented across contracts"
-grep -Fqi 'FOLLOW-UP AREAS' "$repo_dir/SPEC.md" || fail "SPEC follow-up placement missing"
-if grep -Fq 'specific missing evidence under CHANGE MY MIND' "$repo_dir/SPEC.md"; then fail "SPEC retains stale missing-evidence placement"; fi
-for document in "$skill" "$operations" "$readme" "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md"; do
-  grep -Fqi 'sole supported wrapper model-output' "$document" || fail "JSON-only wrapper contract missing: $document"
-  grep -Fqi 'wrapper-owned semantic validation' "$document" || fail "wrapper semantic-validation contract missing: $document"
-  grep -Fqi 'canonical eight-line' "$document" || fail "canonical renderer contract missing: $document"
-  grep -Fqi 'redacted failure' "$document" || fail "redacted failure diagnostic contract missing: $document"
-  grep -Fqi 'at most two children' "$document" || fail "two-child retry bound missing: $document"
-  grep -Fqi 'direct/native role invocation is unsupported' "$document" || fail "unsupported direct/native invocation contract missing: $document"
-done
-for document in "$skill" "$operations" "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md"; do
-  grep -Fqi 'runtime-valid response-validation failure' "$document" || fail "runtime-gated retry contract missing: $document"
-  grep -Fqi 'terminal' "$document" || fail "terminal runtime failure contract missing: $document"
-  grep -Fqi 'rejected content' "$document" || fail "rejected-content redaction contract missing: $document"
-  grep -Fqi 'mode-0700 consultation directory' "$document" || fail "private consultation directory contract missing: $document"
-  grep -Fqi 'unconditional exit trap' "$document" || fail "consultation cleanup contract missing: $document"
-done
-for document in "$skill" "$operations" "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md"; do
-  if grep -Eqi 'trailing spaces or tabs|raw response bytes|byte-preserved successful response|Structural recognition' "$document"; then
-    fail "retired text-parser or raw-byte contract remains: $document"
-  fi
-done
-grep -Fqi 'read-only' "$manifest" || fail "listing omits read-only boundary"
-grep -Fqi 'tool-free' "$manifest" || fail "listing omits tool-free boundary"
-grep -Fqi 'does not implement' "$manifest" || fail "listing omits implementation boundary"
-pass "JSON schema, semantic validation, renderer, retry, privacy, cleanup, and unsupported-native documentation parity"
-grep -Fqi 'accepting that plan' "$operations" || fail "research-first disposition semantics missing"
-grep -Fqi '.retired-v1.3.0-zero-tool' "$operations" || fail "1.3.0 zero-tool retirement documentation missing"
-grep -Fq 'substitute another model' "$skill" || fail "no-substitution rule missing"
-grep -Fq 'For `skip` or `unavailable`, emit only the existing `ADVISOR DECISION`' "$skill" || fail "skip/unavailable receipt exclusion missing"
-call_line=$(grep -n '^ADVISOR CALL$' "$skill" | head -1 | cut -d: -f1)
-transport_line=$(grep -n '^5\. Run exactly one selected consultation\.' "$skill" | head -1 | cut -d: -f1)
-response_line=$(grep -n '^6\. Receive the required advisor response' "$skill" | head -1 | cut -d: -f1)
-inspection_line=$(grep -n 'post-response inspection proves' "$skill" | head -1 | cut -d: -f1)
-result_line=$(grep -n '^ADVISOR RESULT$' "$skill" | head -1 | cut -d: -f1)
-[ -n "$call_line" ] && [ -n "$transport_line" ] && [ "$call_line" -lt "$transport_line" ] || fail "ADVISOR CALL must precede transport"
-[ -n "$response_line" ] && [ -n "$inspection_line" ] && [ -n "$result_line" ] && [ "$inspection_line" -lt "$response_line" ] && [ "$response_line" -lt "$result_line" ] || fail "transport inspection must precede response processing and completed result"
-grep -Fq '($b|unique)!=["read-only"]' "$inspector" || fail "inspector does not block non-read-only policy"
-grep -Fq '($tool_events|length)!=0' "$inspector" || fail "inspector does not block advisor tool use"
-grep -Fq 'parent_thread_id=${CODEX_THREAD_ID-}' "$parent_inspector" || fail "parent inspector does not require CODEX_THREAD_ID"
-if grep -Fq 'CODEX_SESSION_ID' "$parent_inspector"; then fail "parent inspector falls back to CODEX_SESSION_ID"; fi
-for document in "$skill" "$operations"; do
-  grep -Fq 'nonempty `session_id`' "$document" || fail "deferred handoff contract omits nonterminal session_id: $document"
-  grep -Fq 'await tools.write_stdin' "$document" || fail "deferred handoff contract omits write_stdin polling: $document"
-  grep -Fq 'while (process.session_id)' "$document" || fail "deferred handoff contract omits session polling loop: $document"
-  grep -Fq 'combinedOutput += process.output ?? ""' "$document" || fail "deferred handoff contract does not preserve tool-output chunks: $document"
-  grep -Fq 'const candidates = combinedOutput.split(/\r?\n/).flatMap' "$document" || fail "deferred handoff contract omits mixed-output extraction: $document"
-  grep -Fq 'value.schema_version === 3' "$document" || fail "deferred handoff contract omits schema-v3 envelope check: $document"
-  grep -Fq 'const verifiedEnvelope = candidates[0];' "$document" || fail "deferred handoff contract omits post-drain envelope handoff: $document"
-  grep -Fq 'text(JSON.stringify(verifiedEnvelope));' "$document" || fail "deferred handoff contract omits final envelope delivery: $document"
-  grep -Fq 'outer `functions.wait`' "$document" || fail "deferred handoff contract omits outer wait rule: $document"
-done
-for document in "$readme" "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md"; do
-  grep -Fq 'session_id' "$document" || fail "deferred handoff lifecycle documentation omits session handle: $document"
-  grep -Fqi 'nonterminal' "$document" || fail "deferred handoff lifecycle documentation omits terminality rule: $document"
-  grep -Fq 'exactly one schema-v3 envelope' "$document" || fail "deferred handoff lifecycle documentation omits final-envelope rule: $document"
-done
-python3 - "$skill" "$operations" <<'PY'
-import sys
-from pathlib import Path
-
-for filename in sys.argv[1:]:
-    lines = Path(filename).read_text(encoding="utf-8").splitlines()
-    poll = next(i for i, line in enumerate(lines) if "while (process.session_id)" in line)
-    parse = next(i for i, line in enumerate(lines) if "JSON.parse(line)" in line)
-    emit = next(i for i, line in enumerate(lines) if "text(JSON.stringify(verifiedEnvelope));" in line)
-    if parse <= poll:
-        raise SystemExit(f"deferred handoff parses before draining session: {filename}")
-    if emit <= parse:
-        raise SystemExit(f"deferred handoff emits before envelope validation: {filename}")
-    if not any("initial yielded result" in line and "nonterminal" in line for line in lines):
-        raise SystemExit(f"initial yielded result terminality rule missing: {filename}")
-    if not any("functions.wait" in line and "nonterminal" in line for line in lines):
-        raise SystemExit(f"outer functions.wait terminality rule missing: {filename}")
-print("deferred handoff contract ordering valid")
-PY
-pass "deferred exec results are drained with write_stdin and one final envelope is parsed after terminal exit"
-for phrase in 'codex exec --json --ignore-user-config --ignore-rules' '--sandbox read-only --model "$model"' 'model_reasoning_effort="high"' '--skip-git-repo-check' '--output-schema "$response_schema"' '--output-last-message' 'ADVISOR TRANSPORT:' '--expected-parent "$parent_thread_id"' 'jq --stream' 'consultation reused the parent thread' 'response validation failed' 'advisor response was not verified'; do
-  grep -Fq -- "$phrase" "$transport" || fail "transport contract omits: $phrase"
-done
-if grep -Eq 'response_is_well_formed|Normalize only trailing ASCII|original candidate remains untouched' "$transport"; then fail "retired line response parser remains"; fi
-if grep -Eq 'auth\.json|bws|get secret|CODEX_HOME=' "$transport"; then fail "transport handles authentication or secrets"; fi
-pass "implicit boundaries, root research, exact read-only transport, clean output, and mandatory inspection"
-
-for document in "$manifest" "$skill" "$ui" "$operations" "$readme" "$terra_role" "$sol_role"; do
-  if grep -Eqi 'SELECTIVE ROUTE|mode: solo|solo \| delegate|sol_advisor_(luna|terra|sol_reviewer)|route selected implementation|fresh final review lane'; then
-    fail "retired delivery behavior remains in $document"
-  fi <"$document"
-done
-for forbidden in hooks .mcp.json .app.json; do [ ! -e "$plugin_dir/$forbidden" ] || fail "forbidden component exists: $forbidden"; done
-pass "retired routing, implementer, reviewer, hook, MCP, and app behavior absent"
-
-for digest in \
- fba1b42849d93737e83b094a2ab0b1611f87ac37db7438c8bbdf581f0813f8eb \
- 5cfaf77f14757074ca5d3cfecd0b8204c91dc14eff8d6119985c64416ddf4853 \
- 12fa9180a292876e6731bc325779123bcd931c3caa902fbf90d676a31833be84 \
- 4425a8c1f21ce8c6af93f96adc253bbc33ea301f1389b3fa8ce350be08584eca \
- dc329fe87f6f6610c13157ec16432f91c79cf5a541ee3e7448f6afb165dd18ce \
- 06c318e5e93f37452635906394e6ea69fb6a65ba9e6ad7172d37b444e0dc871d \
- 77ed2f36bb149da5d9032230c3d6f5e5cd56b059b3fa5f59085249bba06e1f3a \
- 0333acf0ef562bcfebd06009ac09bd1dd8cbc04c4cf28e08e9e049bd8bf202d2 \
- b0be4d07ef2958ad2dd01a4b11be6edff309063fe45d75e778aeac6dfce80363 \
- 95be7e69ee4d5350ea199a66280e180774309371fefcf1a2765f782ec1a670c0 \
- 5ab78b10e1abd4b86d8adeb7d71aa6b4d1c79b1a44457d2c717f5a03cd360367 \
- 4ad79cb613cc9865cb3d1db02f2e98b3b117524153c075a2de3d6bd249798c5e \
- 4c29a9fec188e7c9c1618dacbcf0e26e40781f1ba783f425ece24c5919a16ad4 \
- e939a9c7e96d2a74dde015838802d6a481d36520616464a192daff0412dccaba \
- 294b5fe76799200b0ff814decc575a82ddbf4d426a4a680750113608de6516cd; do
-  grep -Fq "$digest" "$installer" || fail "missing historical digest: $digest"
-done
-pass "all historical and Advisor 1.1.0 upgrade fingerprints retained"
+. "$verify_dir/contract-docs.sh"
 
 tmp_base=${TMPDIR:-/tmp}; case "$tmp_base" in /*) ;; *) tmp_base=/tmp ;; esac
 tmp=$(mktemp -d "$tmp_base/advisor-verify.XXXXXX") || fail "cannot create fixture directory"
@@ -375,1187 +59,23 @@
 trap cleanup 0 HUP INT TERM
 snapshot() { find "$1" -mindepth 1 -maxdepth 1 -print | LC_ALL=C sort | while IFS= read -r f; do if [ -L "$f" ]; then printf 'L %s\n' "$(basename "$f")"; elif [ -f "$f" ]; then shasum -a 256 "$f"; else printf 'O %s\n' "$(basename "$f")"; fi; done; }
 
-clean=$tmp/clean
-sh "$installer" --target-dir "$clean" >/dev/null
-cmp -s "$terra_role" "$clean/advisor-terra.toml" || fail "clean Terra install differs"
-cmp -s "$sol_role" "$clean/advisor-sol.toml" || fail "clean Sol install differs"
-cmp -s "$astra_role" "$clean/advisor-astra.toml" || fail "clean Astra install differs"
-sh "$installer" --target-dir "$clean" --check >/dev/null
-before=$(snapshot "$clean"); sh "$installer" --target-dir "$clean" >/dev/null; after=$(snapshot "$clean")
-[ "$before" = "$after" ] || fail "second install changed exact state"
-[ ! -e "$clean/config.toml" ] || fail "installer edited Codex config"
-pass "clean install, exact check, idempotency, and no config mutation"
-
-v110=$tmp/advisor-v110; mkdir "$v110"
-python3 - "$terra_role" "$sol_role" "$v110" <<'PY'
-from pathlib import Path
-import sys
-terra,sol,target=map(Path,sys.argv[1:])
-replacements={
-    terra:("Standard fresh, read-only advisor for material technical decisions and generic advisor requests.","Fresh, read-only GPT-5.6 Terra advisor for Luna, Spark, and lower-capability parents."),
-    sol:("Specialist fresh, read-only advisor for narrowly qualified unresolved critical decisions.","Fresh, read-only GPT-5.6 Sol advisor for Terra, Sol, and unknown parents."),
-}
-zero_tool_block='''
-Use zero tools. Do not call any tool or function, inspect files or repositories,
-browse, fetch, or search the web, access external services, or conduct independent
-research. The packet and its cited source references are the complete record. Recommend
-a path when the evidence supports a decision. If it does not, identify only a concrete
-research-first next step, missing evidence, research questions, or bounded
-brainstorming areas under FOLLOW-UP AREAS; do not seek or perform that follow-up
-yourself.
-'''
-follow_up_output='''FOLLOW-UP AREAS: <none, or a concrete research-first next step, missing evidence,
-research questions, or bounded brainstorming areas>
-'''
-for source,(new,old) in replacements.items():
-    text=source.read_text(encoding="utf-8")
-    if text.count(new)!=1: raise SystemExit(f"current role description fixture mismatch: {source}")
-    if text.count(zero_tool_block)!=1: raise SystemExit(f"current role zero-tool fixture mismatch: {source}")
-    if text.count(follow_up_output)!=1: raise SystemExit(f"current role follow-up fixture mismatch: {source}")
-    prior=text.replace(new,old).replace(zero_tool_block,"").replace(follow_up_output,"")
-    prior=prior.replace("Do not spawn or route another agent", "Do not spawn another agent")
-    if source==sol:
-        current_pin='model = "gpt-6-sol"'
-        if prior.count(current_pin)!=1: raise SystemExit("current Sol model fixture mismatch")
-        prior=prior.replace(current_pin,'model = "gpt-5.6-sol"')
-    target.joinpath(source.name).write_text(prior,encoding="utf-8")
-PY
-assert_v110_digest() {
-  file=$1 expected=$2
-  actual=$(shasum -a 256 "$file" | awk '{print $1}')
-  [ "$actual" = "$expected" ] || fail "Advisor 1.1.0 fixture digest mismatch: $file ($actual)"
-}
-assert_v110_digest "$v110/advisor-terra.toml" 95be7e69ee4d5350ea199a66280e180774309371fefcf1a2765f782ec1a670c0
-assert_v110_digest "$v110/advisor-sol.toml" 5ab78b10e1abd4b86d8adeb7d71aa6b4d1c79b1a44457d2c717f5a03cd360367
-if sh "$installer" --target-dir "$v110" --check >/dev/null 2>&1; then fail "check accepted active Advisor 1.1.0 roles"; fi
-sh "$installer" --target-dir "$v110" >/dev/null
-cmp -s "$terra_role" "$v110/advisor-terra.toml" || fail "Advisor 1.1.0 Terra upgrade did not install 1.3.0 exactly"
-cmp -s "$sol_role" "$v110/advisor-sol.toml" || fail "Advisor 1.1.0 Sol upgrade did not install 1.3.0 exactly"
-cmp -s "$astra_role" "$v110/advisor-astra.toml" || fail "Advisor 1.1.0 upgrade did not install Astra exactly"
-assert_v110_digest "$v110/advisor-terra.toml.retired-v1.1.0" 95be7e69ee4d5350ea199a66280e180774309371fefcf1a2765f782ec1a670c0
-assert_v110_digest "$v110/advisor-sol.toml.retired-v1.1.0" 5ab78b10e1abd4b86d8adeb7d71aa6b4d1c79b1a44457d2c717f5a03cd360367
-sh "$installer" --target-dir "$v110" --check >/dev/null
-before=$(snapshot "$v110"); sh "$installer" --target-dir "$v110" >/dev/null; after=$(snapshot "$v110")
-[ "$before" = "$after" ] || fail "Advisor 1.1.0 upgraded state is not idempotent"
-v110_interrupted=$tmp/advisor-v110-interrupted; mkdir "$v110_interrupted"
-cp "$v110/advisor-terra.toml.retired-v1.1.0" "$v110_interrupted/advisor-terra.toml.retired-v1.1.0"
-cp "$v110/advisor-sol.toml.retired-v1.1.0" "$v110_interrupted/advisor-sol.toml.retired-v1.1.0"
-sh "$installer" --target-dir "$v110_interrupted" >/dev/null
-cmp -s "$terra_role" "$v110_interrupted/advisor-terra.toml" || fail "retired-only Terra upgrade did not resume"
-cmp -s "$sol_role" "$v110_interrupted/advisor-sol.toml" || fail "retired-only Sol upgrade did not resume"
-cmp -s "$astra_role" "$v110_interrupted/advisor-astra.toml" || fail "retired-only upgrade did not install Astra exactly"
-sh "$installer" --target-dir "$v110_interrupted" --check >/dev/null
-pass "exact Advisor 1.1.0 same-path upgrade, recoverable retirement, and idempotency"
-
-v130=$tmp/advisor-v130; mkdir "$v130"
-python3 - "$terra_role" "$sol_role" "$v130" <<'PY'
-from pathlib import Path
-import sys
-current_block='''
-Use zero tools. Do not call any tool or function, inspect files or repositories,
-browse, fetch, or search the web, access external services, or conduct independent
-research. The packet and its cited source references are the complete record. Recommend
-a path when the evidence supports a decision. If it does not, identify only a concrete
-research-first next step, missing evidence, research questions, or bounded
-brainstorming areas under FOLLOW-UP AREAS; do not seek or perform that follow-up
-yourself.
-'''
-prior_block='''
-Use zero tools. Do not call any tool or function, inspect files or repositories,
-browse, fetch, or search the web, access external services, or conduct independent
-research. The packet and its cited source references are the complete record. If
-evidence is insufficient, name the specific missing evidence under CHANGE MY MIND;
-do not seek it yourself.
-'''
-follow_up_output='''FOLLOW-UP AREAS: <none, or a concrete research-first next step, missing evidence,
-research questions, or bounded brainstorming areas>
-'''
-for source in map(Path,sys.argv[1:3]):
-    text=source.read_text(encoding="utf-8")
-    if text.count(current_block)!=1: raise SystemExit(f"current role zero-tool fixture mismatch: {source}")
-    if text.count(follow_up_output)!=1: raise SystemExit(f"current role follow-up fixture mismatch: {source}")
-    prior=text.replace(current_block,prior_block).replace(follow_up_output,"")
-    prior=prior.replace("Do not spawn or route another agent", "Do not spawn another agent")
-    if source.name=="advisor-sol.toml":
-        current_pin='model = "gpt-6-sol"'
-        if prior.count(current_pin)!=1: raise SystemExit("current Sol model fixture mismatch")
-        prior=prior.replace(current_pin,'model = "gpt-5.6-sol"')
-    Path(sys.argv[3],source.name).write_text(prior,encoding="utf-8")
-PY
-assert_v110_digest "$v130/advisor-terra.toml" e939a9c7e96d2a74dde015838802d6a481d36520616464a192daff0412dccaba
-assert_v110_digest "$v130/advisor-sol.toml" 294b5fe76799200b0ff814decc575a82ddbf4d426a4a680750113608de6516cd
-cp "$v110/advisor-terra.toml.retired-v1.1.0" "$v130/advisor-terra.toml.retired-v1.1.0"
-cp "$v110/advisor-sol.toml.retired-v1.1.0" "$v130/advisor-sol.toml.retired-v1.1.0"
-if sh "$installer" --target-dir "$v130" --check >/dev/null 2>&1; then fail "check accepted active prior Advisor 1.3.0 roles"; fi
-sh "$installer" --target-dir "$v130" >/dev/null
-cmp -s "$terra_role" "$v130/advisor-terra.toml" || fail "Advisor 1.3.0 Terra upgrade did not install current role exactly"
-cmp -s "$sol_role" "$v130/advisor-sol.toml" || fail "Advisor 1.3.0 Sol upgrade did not install current role exactly"
-cmp -s "$astra_role" "$v130/advisor-astra.toml" || fail "Advisor 1.3.0 upgrade did not install Astra exactly"
-assert_v110_digest "$v130/advisor-terra.toml.retired-v1.3.0-zero-tool" e939a9c7e96d2a74dde015838802d6a481d36520616464a192daff0412dccaba
-assert_v110_digest "$v130/advisor-sol.toml.retired-v1.3.0-zero-tool" 294b5fe76799200b0ff814decc575a82ddbf4d426a4a680750113608de6516cd
-sh "$installer" --target-dir "$v130" --check >/dev/null
-before=$(snapshot "$v130"); sh "$installer" --target-dir "$v130" >/dev/null; after=$(snapshot "$v130")
-[ "$before" = "$after" ] || fail "Advisor 1.3.0 upgraded state is not idempotent"
-
-v130_early=$tmp/advisor-v130-early; mkdir "$v130_early"
-python3 - "$v130/advisor-terra.toml.retired-v1.3.0-zero-tool" "$v130/advisor-sol.toml.retired-v1.3.0-zero-tool" "$v130_early" <<'PY'
-from pathlib import Path
-import sys
-zero_tool_block='''
-Use zero tools. Do not call any tool or function, inspect files or repositories,
-browse, fetch, or search the web, access external services, or conduct independent
-research. The packet and its cited source references are the complete record. If
-evidence is insufficient, name the specific missing evidence under CHANGE MY MIND;
-do not seek it yourself.
-'''
-for source in map(Path,sys.argv[1:3]):
-    text=source.read_text(encoding="utf-8")
-    if text.count(zero_tool_block)!=1: raise SystemExit(f"zero-tool predecessor fixture mismatch: {source}")
-    active_name=source.name.removesuffix(".retired-v1.3.0-zero-tool")
-    Path(sys.argv[3],active_name).write_text(text.replace(zero_tool_block,""),encoding="utf-8")
-PY
-assert_v110_digest "$v130_early/advisor-terra.toml" 4ad79cb613cc9865cb3d1db02f2e98b3b117524153c075a2de3d6bd249798c5e
-assert_v110_digest "$v130_early/advisor-sol.toml" 4c29a9fec188e7c9c1618dacbcf0e26e40781f1ba783f425ece24c5919a16ad4
-cp "$v110/advisor-terra.toml.retired-v1.1.0" "$v130_early/advisor-terra.toml.retired-v1.1.0"
-cp "$v110/advisor-sol.toml.retired-v1.1.0" "$v130_early/advisor-sol.toml.retired-v1.1.0"
-sh "$installer" --target-dir "$v130_early" >/dev/null
-cmp -s "$terra_role" "$v130_early/advisor-terra.toml" || fail "early Advisor 1.3.0 Terra upgrade did not install current role exactly"
-cmp -s "$sol_role" "$v130_early/advisor-sol.toml" || fail "early Advisor 1.3.0 Sol upgrade did not install current role exactly"
-cmp -s "$astra_role" "$v130_early/advisor-astra.toml" || fail "early Advisor 1.3.0 upgrade did not install Astra exactly"
-assert_v110_digest "$v130_early/advisor-terra.toml.retired-v1.3.0" 4ad79cb613cc9865cb3d1db02f2e98b3b117524153c075a2de3d6bd249798c5e
-assert_v110_digest "$v130_early/advisor-sol.toml.retired-v1.3.0" 4c29a9fec188e7c9c1618dacbcf0e26e40781f1ba783f425ece24c5919a16ad4
-sh "$installer" --target-dir "$v130_early" --check >/dev/null
-pass "both prior Advisor 1.3.0 generations upgrade to separate retirement paths"
-
-# Upgrade the exact v1.4.5 Sol role, preserving it at a versioned recovery path.
-v145=$tmp/advisor-v145; mkdir "$v145"
-python3 - "$sol_role" "$v145/advisor-sol.toml" <<'PY'
-from pathlib import Path
-import sys
-source,target=map(Path,sys.argv[1:])
-text=source.read_text(encoding="utf-8")
-current='model = "gpt-6-sol"'
-if text.count(current)!=1: raise SystemExit("current Sol model fixture mismatch")
-target.write_text(text.replace(current,'model = "gpt-5.6-sol"'),encoding="utf-8")
-PY
-actual=$(shasum -a 256 "$v145/advisor-sol.toml" | awk '{print $1}')
-[ "$actual" = 8923bc56c5cd43db004bf1f2bfdabf3cee56dbcbe13434bb0b01cd5cdb523a7c ] || fail "Advisor 1.4.5 Sol fixture digest mismatch: $actual"
-before=$(snapshot "$v145")
-if sh "$installer" --target-dir "$v145" --check >/dev/null 2>&1; then fail "check accepted active Advisor 1.4.5 Sol role"; fi
-after=$(snapshot "$v145"); [ "$before" = "$after" ] || fail "check mutated active Advisor 1.4.5 Sol role"
-sh "$installer" --target-dir "$v145" >/dev/null
-cmp -s "$sol_role" "$v145/advisor-sol.toml" || fail "Advisor 1.4.5 Sol upgrade did not install current role exactly"
-actual=$(shasum -a 256 "$v145/advisor-sol.toml.retired-v1.4.5" | awk '{print $1}')
-[ "$actual" = 8923bc56c5cd43db004bf1f2bfdabf3cee56dbcbe13434bb0b01cd5cdb523a7c ] || fail "Advisor 1.4.5 Sol retirement digest mismatch: $actual"
-sh "$installer" --target-dir "$v145" --check >/dev/null
-before=$(snapshot "$v145"); sh "$installer" --target-dir "$v145" >/dev/null; after=$(snapshot "$v145")
-[ "$before" = "$after" ] || fail "Advisor 1.4.5 Sol upgrade is not idempotent"
-
-v145_interrupted=$tmp/advisor-v145-interrupted; mkdir "$v145_interrupted"
-cp "$v145/advisor-sol.toml.retired-v1.4.5" "$v145_interrupted/advisor-sol.toml.retired-v1.4.5"
-sh "$installer" --target-dir "$v145_interrupted" >/dev/null
-cmp -s "$sol_role" "$v145_interrupted/advisor-sol.toml" || fail "retired-only Advisor 1.4.5 upgrade did not resume"
-sh "$installer" --target-dir "$v145_interrupted" --check >/dev/null
-before=$(snapshot "$v145_interrupted"); sh "$installer" --target-dir "$v145_interrupted" >/dev/null; after=$(snapshot "$v145_interrupted")
-[ "$before" = "$after" ] || fail "retired-only Advisor 1.4.5 state is not idempotent"
-
-for kind in v145-edited v145-collision; do
-  target=$tmp/refuse-$kind; mkdir "$target"
-  cp "$v145/advisor-sol.toml.retired-v1.4.5" "$target/advisor-sol.toml"
-  case "$kind" in
-    v145-edited) printf '\n# owner edit\n' >>"$target/advisor-sol.toml" ;;
-    v145-collision) printf 'unknown retirement collision\n' >"$target/advisor-sol.toml.retired-v1.4.5" ;;
-  esac
-  before=$(snapshot "$target")
-  if sh "$installer" --target-dir "$target" >/dev/null 2>&1; then fail "installer accepted $kind Sol state"; fi
-  after=$(snapshot "$target"); [ "$before" = "$after" ] || fail "$kind refusal mutated target"
-done
-pass "exact Advisor 1.4.5 Sol upgrade, retirement recovery, idempotency, and edited/collision refusal"
-
-# Exercise all three v0.6.0 historical role types using their original exact bytes.
-historical=$tmp/historical; mkdir "$historical"
-sed -n '1,21p' "$repo_dir/plugins/advisor/scripts/verify.sh" >/dev/null
-python3 - "$historical" <<'PY'
-from pathlib import Path
-import sys
-root=Path(sys.argv[1])
-files={
-"sol-advisor-luna-implementer.toml":'''name = "sol_advisor_luna_implementer"\ndescription = "Sol Advisor's default routine implementation lane for bounded, fully specified work."\nmodel = "gpt-5.6-luna"\nmodel_reasoning_effort = "max"\n\ndeveloper_instructions = """\nYou are Sol Advisor's default routine implementation worker. Execute the supplied\nfive-part implementation specification when the work is bounded and largely\ndetermined by the contract. Preserve every stated interface and constraint, stay\nwithin the owned file set, and document material judgment calls.\n\nYou are not alone in the codebase: preserve concurrent edits and do not revert\nunrelated work. Surface material ambiguity, scope conflicts, or verification failures\nrather than redesigning the architecture. Run the requested checks and report actual\nevidence. If the result itself reveals judgment-heavy, high-risk, or misclassified\nwork, stop and return that signal so the parent can escalate immediately to Terra /\nHigh. If the specification is incomplete or wrong, identify the precise correction\nneeded for one corrected Luna attempt; that retry is not a prerequisite for Terra.\nDo not silently substitute a different role, model, or reasoning level; this installed\ncustom-agent profile is the required routine lane.\n"""\n''',
-"sol-advisor-terra-implementer.toml":'''name = "sol_advisor_terra_implementer"\ndescription = "Sol Advisor's explicit high-complexity escalation lane for judgment-heavy or high-risk work."\nmodel = "gpt-5.6-terra"\nmodel_reasoning_effort = "high"\n\ndeveloper_instructions = """\nYou are Sol Advisor's explicit high-complexity escalation worker. Execute the\nsupplied five-part implementation specification within the settled architecture when\nthe parent identifies judgment-heavy, high-risk, or wider-blast-radius work, whether\nthat is known before delegation or revealed by the first Luna result. A corrected\nLuna attempt is reserved for a specification error and is not a prerequisite for\nTerra escalation.\nPreserve every stated interface and constraint, stay within the owned file set, and\ndocument material judgment calls.\n\nYou are not alone in the codebase: preserve concurrent edits and do not revert\nunrelated work. Surface ambiguity, scope conflicts, or verification failures rather\nthan redesigning the architecture without direction. Run the requested checks and\nreport actual evidence. Do not silently substitute a different role, model, or\nreasoning level; this installed custom-agent profile is the required escalation lane.\n"""\n''',
-"sol-advisor-sol-reviewer.toml":'''name = "sol_advisor_sol_reviewer"\ndescription = "Sol Advisor's fresh, read-only final review lane for inspected diffs and evidence."\nmodel = "gpt-5.6-sol"\nmodel_reasoning_effort = "high"\nsandbox_mode = "read-only"\n\ndeveloper_instructions = """\nYou are Sol Advisor's fresh final reviewer. Remain strictly read-only: do not create,\nmodify, delete, format, or implement files, and do not broaden the requested scope.\nInspect the actual files, accumulated change set, stated interfaces and constraints,\nand verification evidence in a fresh context.\n\nReturn exactly one verdict: ship, fix-first, or rethink. Base the verdict on concrete,\nevidence-backed findings. Use fix-first only for bounded required corrections and\nrethink when the architecture or scope must change. Do not silently substitute a\ndifferent role, model, or reasoning level; this installed custom-agent profile is the\nrequired read-only review lane.\n"""\n'''}
-for name,text in files.items(): (root/name).write_text(text,encoding="utf-8")
-PY
-python3 - "$historical/sol-advisor.toml" <<'PY'
-from pathlib import Path
-import sys
-Path(sys.argv[1]).write_text('''name = "sol_advisor"\ndescription = "Fresh, read-only GPT-5.6 Sol advisor for bounded technical decisions."\nmodel = "gpt-5.6-sol"\nmodel_reasoning_effort = "high"\nsandbox_mode = "read-only"\n\ndeveloper_instructions = """\nYou are Sol Advisor, a consultation-only technical advisor. Remain strictly\nread-only. Do not create, edit, delete, format, route, implement, or review final\nwork. Evaluate only the bounded decision packet supplied by the root agent.\n\nReturn exactly:\nADVISOR RESPONSE\nRECOMMENDATION: <one path>\nWHY: <decisive evidence and reasoning>\nSTRONGEST OBJECTION: <best case against the recommendation>\nCHANGE MY MIND: <specific missing or contrary evidence>\nACCEPTANCE CHECKS: <concrete checks>\nRISKS: <material residual risks, or none>\n\nAdvice is non-authoritative. Do not spawn another agent, request irrelevant history,\nor silently substitute a different role, model, reasoning level, or isolation mode.\n"""\n''',encoding="utf-8")
-PY
-python3 - "$historical/advisor.toml" <<'PY'
-from pathlib import Path
-import sys
-Path(sys.argv[1]).write_text('''name = "advisor"\ndescription = "Fresh, read-only advisor for bounded technical decisions. The parent selects the model from the shipped policy."\nsandbox_mode = "read-only"\n\ndeveloper_instructions = """\nYou are Advisor, a consultation-only technical advisor. Remain strictly\nread-only. Do not create, edit, delete, format, route, implement, or review final\nwork. Evaluate only the bounded decision packet supplied by the root agent.\n\nReturn exactly:\nADVISOR RESPONSE\nRECOMMENDATION: <one path>\nWHY: <decisive evidence and reasoning>\nSTRONGEST OBJECTION: <best case against the recommendation>\nCHANGE MY MIND: <specific missing or contrary evidence>\nACCEPTANCE CHECKS: <concrete checks>\nRISKS: <material residual risks, or none>\n\nAdvice is non-authoritative. Do not spawn another agent, request irrelevant history,\nor silently substitute a different role, model, reasoning level, or isolation mode.\n"""\n''',encoding="utf-8")
-PY
-
-v020=$tmp/historical-v020
-v050=$tmp/historical-v050
-intermediate=$tmp/historical-intermediate
-mkdir "$v020" "$v050" "$intermediate"
-python3 - "$v020" "$v050" "$intermediate" <<'PY'
-from pathlib import Path
-import sys
-v020,v050,intermediate=map(Path,sys.argv[1:])
-v020.joinpath("sol-advisor-luna-implementer.toml").write_text('''name = "sol_advisor_luna_implementer"\ndescription = "Sol Advisor's routine implementation lane for bounded, fully specified work."\nmodel = "gpt-5.6-luna"\nmodel_reasoning_effort = "max"\n\ndeveloper_instructions = """\nYou are Sol Advisor's routine implementation worker. Execute the supplied five-part\nimplementation specification exactly when it is bounded and largely determined by\nthe contract. Preserve stated interfaces and constraints, make only the files you\nown, and adapt to concurrent edits instead of reverting work you do not own.\n\nSurface material ambiguity, missing acceptance criteria, scope conflicts, or failed\nverification rather than redesigning the architecture. Run the requested checks and\nreport actual evidence. Do not silently substitute a different role, model, or\nreasoning level; this installed custom-agent profile is the required routine lane.\n"""\n''',encoding="utf-8")
-v020.joinpath("sol-advisor-terra-implementer.toml").write_text('''name = "sol_advisor_terra_implementer"\ndescription = "Sol Advisor's complex implementation lane for context-heavy or higher-risk work."\nmodel = "gpt-5.6-terra"\nmodel_reasoning_effort = "max"\n\ndeveloper_instructions = """\nYou are Sol Advisor's complex implementation worker. Resolve difficult implementation\ndetails within the settled architecture, including context-heavy, higher-risk, or\nwider-blast-radius work. Preserve every stated interface and constraint, stay within\nthe owned file set, and document material judgment calls.\n\nYou are not alone in the codebase: preserve concurrent edits and do not revert\nunrelated work. Surface ambiguity, scope conflicts, or verification failures rather\nthan changing the architecture without direction. Run the requested checks and report\nactual evidence. Do not silently substitute a different role, model, or reasoning\nlevel; this installed custom-agent profile is the required complex lane.\n"""\n''',encoding="utf-8")
-v050.joinpath("sol-advisor-luna-implementer.toml").write_text('''name = "sol_advisor_luna_implementer"\ndescription = "Sol Advisor's default routine implementation lane for bounded, fully specified work."\nmodel = "gpt-5.6-luna"\nmodel_reasoning_effort = "max"\n\ndeveloper_instructions = """\nYou are Sol Advisor's default routine implementation worker. Execute the supplied\nfive-part implementation specification when the work is bounded and largely\ndetermined by the contract. Preserve every stated interface and constraint, stay\nwithin the owned file set, and document material judgment calls.\n\nYou are not alone in the codebase: preserve concurrent edits and do not revert\nunrelated work. Surface material ambiguity, scope conflicts, or verification failures\nrather than redesigning the architecture. Run the requested checks and report actual\nevidence. If one corrected attempt shows that the work is judgment-heavy, high-risk,\nor misclassified as routine, stop and return that signal so the parent can escalate\nit to Terra / High. Do not silently substitute a different role, model, or reasoning\nlevel; this installed custom-agent profile is the required routine lane.\n"""\n''',encoding="utf-8")
-v050.joinpath("sol-advisor-terra-implementer.toml").write_text('''name = "sol_advisor_terra_implementer"\ndescription = "Sol Advisor's explicit high-complexity escalation lane for judgment-heavy or high-risk work."\nmodel = "gpt-5.6-terra"\nmodel_reasoning_effort = "high"\n\ndeveloper_instructions = """\nYou are Sol Advisor's explicit high-complexity escalation worker. Execute the\nsupplied five-part implementation specification within the settled architecture when\nthe parent identifies judgment-heavy, high-risk, or wider-blast-radius work, or when\none corrected Luna attempt shows that routine routing was a misclassification.\nPreserve every stated interface and constraint, stay within the owned file set, and\ndocument material judgment calls.\n\nYou are not alone in the codebase: preserve concurrent edits and do not revert\nunrelated work. Surface ambiguity, scope conflicts, or verification failures rather\nthan redesigning the architecture without direction. Run the requested checks and\nreport actual evidence. Do not silently substitute a different role, model, or\nreasoning level; this installed custom-agent profile is the required escalation lane.\n"""\n''',encoding="utf-8")
-intermediate.joinpath("sol-advisor-terra-implementer.toml").write_text('''name = "sol_advisor_terra_implementer"\ndescription = "Sol Advisor's sole implementation lane for routine and complex work."\nmodel = "gpt-5.6-terra"\nmodel_reasoning_effort = "high"\n\ndeveloper_instructions = """\nYou are Sol Advisor's sole implementation worker for routine, context-heavy,\nhigher-risk, and wider-blast-radius work. Execute the supplied five-part specification\nwithin the settled architecture. Preserve every stated interface and constraint, stay\nwithin the owned file set, and document material judgment calls.\n\nYou are not alone in the codebase: preserve concurrent edits and do not revert\nunrelated work. Surface ambiguity, scope conflicts, or verification failures rather\nthan redesigning the architecture without direction. Run the requested checks and\nreport actual evidence. Do not silently substitute a different role, model, or\nreasoning level; this installed custom-agent profile is the only implementation lane.\n"""\n''',encoding="utf-8")
-PY
-
-assert_digest() {
-  file=$1 expected=$2
-  actual=$(shasum -a 256 "$file" | awk '{print $1}')
-  [ "$actual" = "$expected" ] || fail "historical fixture digest mismatch: $file ($actual)"
-}
-assert_digest "$v020/sol-advisor-luna-implementer.toml" fba1b42849d93737e83b094a2ab0b1611f87ac37db7438c8bbdf581f0813f8eb
-assert_digest "$v020/sol-advisor-terra-implementer.toml" 4425a8c1f21ce8c6af93f96adc253bbc33ea301f1389b3fa8ce350be08584eca
-assert_digest "$v050/sol-advisor-luna-implementer.toml" 5cfaf77f14757074ca5d3cfecd0b8204c91dc14eff8d6119985c64416ddf4853
-assert_digest "$v050/sol-advisor-terra-implementer.toml" dc329fe87f6f6610c13157ec16432f91c79cf5a541ee3e7448f6afb165dd18ce
-assert_digest "$intermediate/sol-advisor-terra-implementer.toml" 06c318e5e93f37452635906394e6ea69fb6a65ba9e6ad7172d37b444e0dc871d
-assert_digest "$historical/sol-advisor-luna-implementer.toml" 12fa9180a292876e6731bc325779123bcd931c3caa902fbf90d676a31833be84
-assert_digest "$historical/sol-advisor-terra-implementer.toml" 77ed2f36bb149da5d9032230c3d6f5e5cd56b059b3fa5f59085249bba06e1f3a
-assert_digest "$historical/sol-advisor-sol-reviewer.toml" 0333acf0ef562bcfebd06009ac09bd1dd8cbc04c4cf28e08e9e049bd8bf202d2
-assert_digest "$historical/sol-advisor.toml" 20ed49d92068594b251b2cf3fc38207f415a39879e15d07d635b3f7f7127da57
-assert_digest "$historical/advisor.toml" b0be4d07ef2958ad2dd01a4b11be6edff309063fe45d75e778aeac6dfce80363
-
-exercise_retirement() {
-  label=$1 target=$2
-  shift 2
-  sh "$installer" --target-dir "$target" >/dev/null
-  cmp -s "$terra_role" "$target/advisor-terra.toml" || fail "$label Terra advisor install mismatch"
-  cmp -s "$sol_role" "$target/advisor-sol.toml" || fail "$label Sol advisor install mismatch"
-  cmp -s "$astra_role" "$target/advisor-astra.toml" || fail "$label Astra advisor install mismatch"
-  for old in "$@"; do
-    suffix=.retired-v0.6.0
-    [ "$old" != sol-advisor.toml ] || suffix=.retired-v1.0.0
-    [ "$old" != advisor.toml ] || suffix=.retired-v1.0.1
-    [ ! -e "$target/$old" ] && [ -f "$target/$old$suffix" ] || fail "$label retirement failed: $old"
-  done
-  sh "$installer" --target-dir "$target" --check >/dev/null
-  before=$(snapshot "$target"); sh "$installer" --target-dir "$target" >/dev/null; after=$(snapshot "$target")
-  [ "$before" = "$after" ] || fail "$label retired-only state is not idempotent"
-}
-exercise_retirement v0.2.0 "$v020" sol-advisor-luna-implementer.toml sol-advisor-terra-implementer.toml
-exercise_retirement v0.5.0 "$v050" sol-advisor-luna-implementer.toml sol-advisor-terra-implementer.toml
-exercise_retirement intermediate "$intermediate" sol-advisor-terra-implementer.toml
-exercise_retirement through-v1.0.1 "$historical" advisor.toml sol-advisor.toml sol-advisor-luna-implementer.toml sol-advisor-terra-implementer.toml sol-advisor-sol-reviewer.toml
-pass "all historical digests retire dynamically and every vintage is second-run idempotent"
-
-for kind in modified symlink nonregular astra-modified astra-symlink astra-nonregular dual collision neutral-modified neutral-dual v110-modified v110-dual v110-collision; do
-  target=$tmp/refuse-$kind; mkdir "$target"
-  case "$kind" in
-    modified) printf 'unknown\n' >"$target/sol-advisor-luna-implementer.toml" ;;
-    symlink) ln -s "$terra_role" "$target/sol-advisor-luna-implementer.toml" ;;
-    nonregular) mkdir "$target/sol-advisor-luna-implementer.toml" ;;
-    astra-modified) printf 'unknown\n' >"$target/advisor-astra.toml" ;;
-    astra-symlink) ln -s "$astra_role" "$target/advisor-astra.toml" ;;
-    astra-nonregular) mkdir "$target/advisor-astra.toml" ;;
-    dual) cp "$historical/sol-advisor-luna-implementer.toml.retired-v0.6.0" "$target/sol-advisor-luna-implementer.toml"; cp "$target/sol-advisor-luna-implementer.toml" "$target/sol-advisor-luna-implementer.toml.retired-v0.6.0" ;;
-    collision) printf 'unknown\n' >"$target/sol-advisor-luna-implementer.toml.retired-v0.6.0" ;;
-    neutral-modified) printf 'unknown\n' >"$target/advisor.toml" ;;
-    neutral-dual) cp "$historical/advisor.toml.retired-v1.0.1" "$target/advisor.toml"; cp "$historical/advisor.toml.retired-v1.0.1" "$target/advisor.toml.retired-v1.0.1" ;;
-    v110-modified) printf 'unknown\n' >"$target/advisor-terra.toml" ;;
-    v110-dual) cp "$v110/advisor-terra.toml.retired-v1.1.0" "$target/advisor-terra.toml"; cp "$v110/advisor-terra.toml.retired-v1.1.0" "$target/advisor-terra.toml.retired-v1.1.0" ;;
-    v110-collision) cp "$v110/advisor-terra.toml.retired-v1.1.0" "$target/advisor-terra.toml"; printf 'unknown\n' >"$target/advisor-terra.toml.retired-v1.1.0" ;;
-  esac
-  before=$(snapshot "$target")
-  if sh "$installer" --target-dir "$target" >/dev/null 2>&1; then fail "installer accepted $kind state"; fi
-  after=$(snapshot "$target"); [ "$before" = "$after" ] || fail "$kind refusal mutated target"
-done
-pass "modified, symlink, nonregular, Astra destination, dual-path, destination-collision, obsolete-neutral, and 1.1.0 upgrade refusal"
-
-sessions=$tmp/sessions/2026/08/27; mkdir -p "$sessions"
-id=11111111-1111-7111-8111-111111111111
-root_id=00000000-0000-7000-8000-000000000000
-rollout=$sessions/rollout-fixture-$id.jsonl
-printf '%s\n' \
- '{"type":"response_item","payload":{"text":"DO_NOT_LEAK"}}' \
- "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$id\",\"source\":\"exec\",\"originator\":\"codex_exec\",\"agent_role\":null,\"parent_thread_id\":null}}" \
- '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$rollout"
-out=$(TMPDIR=/nonexistent-read-only-path sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$id")
-printf '%s\n' "$out" | jq -e '.agent_role=="advisor-sol" and .model=="gpt-6-sol" and .effort=="high" and .sandbox_policy_type=="read-only" and .transport=="codex-exec" and (keys|sort)==["agent_role","effort","model","parent_thread_id","permission_profile_type","sandbox_policy_type","thread_id","transport"]' >/dev/null || fail "inspector allowlist/pins"
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-terra --expected-model gpt-5.6-terra --expected-parent "$root_id" "$id" >/dev/null 2>&1; then fail "inspector accepted a role/model pair other than the selected pair"; fi
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$id" "$id" >/dev/null 2>&1; then fail "inspector accepted the parent session as the advisor session"; fi
-printf '%s\n' "$out" | grep -Fq DO_NOT_LEAK && fail "inspector leaked payload"
-desktop_id=22222222-2222-7222-8222-222222222222
-printf '%s\n' \
-  '{"type":"response_item","payload":{"text":"DO_NOT_LEAK_DESKTOP"}}' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$desktop_id\",\"source\":\"exec\",\"originator\":\"Codex Desktop\",\"agent_role\":null,\"parent_thread_id\":null}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$sessions/rollout-fixture-$desktop_id.jsonl"
-desktop_out=$(sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$desktop_id")
-printf '%s\n' "$desktop_out" | jq -e '.agent_role=="advisor-sol" and .model=="gpt-6-sol" and .effort=="high" and .sandbox_policy_type=="read-only" and .permission_profile_type=="managed" and .transport=="codex-exec"' >/dev/null || fail "inspector rejected exact Codex Desktop provenance"
-printf '%s\n' "$desktop_out" | grep -Fq DO_NOT_LEAK && fail "desktop inspector leaked payload"
-assert_provenance_mismatch() {
-  candidate=$1
-  error=$tmp/provenance-error-$candidate.txt
-  if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$candidate" >"$tmp/provenance-out-$candidate.json" 2>"$error"; then
-    fail "inspector accepted mismatched provenance"
-  fi
-  [ "$(cat "$error")" = 'ERROR: runtime_provenance_mismatch' ] || fail "provenance mismatch category was not fixed and stderr-only"
-}
-arbitrary_provenance_id=23232323-2323-7232-8232-232323232323
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$arbitrary_provenance_id\",\"source\":\"exec\",\"originator\":\"desktop\"}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$sessions/rollout-fixture-$arbitrary_provenance_id.jsonl"
-assert_provenance_mismatch "$arbitrary_provenance_id"
-near_provenance_id=24242424-2424-7242-8242-242424242424
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$near_provenance_id\",\"source\":\"exec\",\"originator\":\"Codex desktop\"}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$sessions/rollout-fixture-$near_provenance_id.jsonl"
-assert_provenance_mismatch "$near_provenance_id"
-nonreadonly_id=33333333-3333-7333-8333-333333333333
-nonreadonly=$sessions/rollout-fixture-$nonreadonly_id.jsonl
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$nonreadonly_id\",\"source\":\"exec\",\"originator\":\"codex_exec\"}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"workspace-write"},"permission_profile":{"type":"managed"}}}' >"$nonreadonly"
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$nonreadonly_id" >/dev/null 2>&1; then fail "inspector accepted non-read-only runtime policy"; fi
-tool_id=44444444-4444-7444-8444-444444444444
-tool_rollout=$sessions/rollout-fixture-$tool_id.jsonl
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$tool_id\",\"source\":\"exec\",\"originator\":\"codex_exec\"}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' \
-  '{"type":"response_item","payload":{"type":"function_call","name":"repo_inspection"}}' >"$tool_rollout"
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$tool_id" >/dev/null 2>&1; then fail "inspector accepted advisor tool use"; fi
-printf '%s\n' '{"type":"turn_context","payload":{"model":"gpt-5.6-terra","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >>"$rollout"
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$id" >/dev/null 2>&1; then fail "inspector accepted conflicting model"; fi
-wrong_effort_id=99999999-9999-7999-8999-999999999999
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$wrong_effort_id\",\"source\":\"exec\",\"originator\":\"codex_exec\"}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"medium","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$sessions/rollout-fixture-$wrong_effort_id.jsonl"
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$wrong_effort_id" >/dev/null 2>&1; then fail "inspector accepted wrong effort"; fi
-wrong_source_id=aaaaaaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$wrong_source_id\",\"source\":\"tui\",\"originator\":\"codex-tui\"}}" \
-  '{"type":"turn_context","payload":{"model":"gpt-6-sol","effort":"high","sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$sessions/rollout-fixture-$wrong_source_id.jsonl"
-if sh "$inspector" --sessions-dir "$tmp/sessions" --expected-role advisor-sol --expected-model gpt-6-sol --expected-parent "$root_id" "$wrong_source_id" >/dev/null 2>&1; then fail "inspector accepted non-exec provenance"; fi
-pass "runtime inspector exact allowlist, pins, redaction, distinct session, exec provenance, wrong effort, non-read-only, tool-use, and conflict refusal"
-
-parent_home=$tmp/parent-home
-parent_sessions=$parent_home/sessions
-parent_dir=$parent_sessions/2026/08/28
-mkdir -p "$parent_dir"
-parent_id=55555555-5555-7555-8555-555555555555
-parent_rollout=$parent_dir/rollout-fixture-$parent_id.jsonl
-printf '%s\n' \
-  '{"type":"response_item","payload":{"text":"DO_NOT_LEAK_PARENT_SOURCE"}}' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$parent_id\",\"agent_role\":\"root\"}}" \
-  '{"type":"turn_context","payload":{"sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' >"$parent_rollout"
-parent_out=$(CODEX_HOME="$parent_home" CODEX_THREAD_ID="$parent_id" sh "$parent_inspector")
-printf '%s\n' "$parent_out" | jq -e '.status=="available" and .sandbox_policy_type=="read-only" and .permission_profile_type=="managed" and (keys|sort)==["permission_profile_type","sandbox_policy_type","status","thread_id"]' >/dev/null || fail "parent inspector did not prove read-only default-root runtime"
-if printf '%s\n' "$parent_out" | grep -Fq DO_NOT_LEAK_PARENT_SOURCE; then fail "parent inspector leaked source content"; fi
-workspace_parent_id=bbbbbbbb-bbbb-7bbb-8bbb-bbbbbbbbbbbb
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$workspace_parent_id\"}}" \
-  '{"type":"turn_context","payload":{"sandbox_policy":{"type":"workspace-write"},"permission_profile":{"type":"managed"}}}' >"$parent_dir/rollout-fixture-$workspace_parent_id.jsonl"
-workspace_parent_out=$(CODEX_THREAD_ID="$workspace_parent_id" sh "$parent_inspector" --sessions-dir "$parent_sessions")
-printf '%s\n' "$workspace_parent_out" | jq -e '.status=="available" and .sandbox_policy_type=="workspace-write"' >/dev/null || fail "parent inspector rejected normal workspace-write root"
-danger_parent_id=cccccccc-cccc-7ccc-8ccc-cccccccccccc
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$danger_parent_id\"}}" \
-  '{"type":"turn_context","payload":{"sandbox_policy":{"type":"danger-full-access"},"permission_profile":{"type":"managed"}}}' >"$parent_dir/rollout-fixture-$danger_parent_id.jsonl"
-parent_unavailable() {
-  candidate=$1
-  result=$(CODEX_THREAD_ID="$candidate" sh "$parent_inspector" --sessions-dir "$parent_sessions")
-  printf '%s\n' "$result" | jq -e '.status=="unavailable" and .reason_type=="parent_runtime_unavailable" and .redacted==true and (keys|sort)==["reason_type","redacted","status"]' >/dev/null || fail "parent inspector did not return typed unavailable: $candidate"
-  if printf '%s\n' "$result" | grep -Fq DO_NOT_LEAK_PARENT_SOURCE; then fail "parent inspector leaked unavailable source content"; fi
-}
-missing_id=66666666-6666-7666-8666-666666666666
-parent_unavailable "$missing_id"
-parent_unavailable "$danger_parent_id"
-session_fallback=$(CODEX_SESSION_ID="$parent_id" CODEX_THREAD_ID= sh "$parent_inspector" --sessions-dir "$parent_sessions")
-printf '%s\n' "$session_fallback" | jq -e '.status=="unavailable" and .reason_type=="parent_runtime_unavailable"' >/dev/null || fail "parent inspector used CODEX_SESSION_ID fallback"
-duplicate_dir=$parent_sessions/2026/08/29; mkdir -p "$duplicate_dir"
-cp "$parent_rollout" "$duplicate_dir/rollout-duplicate-$parent_id.jsonl"
-parent_unavailable "$parent_id"
-rm "$duplicate_dir/rollout-duplicate-$parent_id.jsonl"
-conflict_id=77777777-7777-7777-8777-777777777777
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$conflict_id\"}}" \
-  '{"type":"turn_context","payload":{"sandbox_policy":{"type":"read-only"},"permission_profile":{"type":"managed"}}}' \
-  '{"type":"turn_context","payload":{"sandbox_policy":{"type":"workspace-write"},"permission_profile":{"type":"managed"}}}' >"$parent_dir/rollout-fixture-$conflict_id.jsonl"
-parent_unavailable "$conflict_id"
-malformed_id=88888888-8888-7888-8888-888888888888
-printf '%s\n' '{not-json' >"$parent_dir/rollout-fixture-$malformed_id.jsonl"
-parent_unavailable "$malformed_id"
-symlink_id=99999999-9999-7999-8999-999999999999
-ln -s "$parent_rollout" "$parent_dir/rollout-fixture-$symlink_id.jsonl"
-parent_unavailable "$symlink_id"
-nonregular_id=aaaaaaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa
-mkdir "$parent_dir/rollout-fixture-$nonregular_id.jsonl"
-parent_unavailable "$nonregular_id"
-pass "parent preflight read-only/workspace-write success plus danger-full-access, missing identity/rollout, duplicate, conflicting, malformed, symlink, nonregular, and no-session-fallback refusal"
-
-fake_bin=$tmp/fake-bin
-fake_home=$tmp/fake-codex-home
-mkdir -p "$fake_bin" "$fake_home/sessions/2026/08/30"
-real_jq=$(command -v jq)
-python3 - "$fake_bin/codex" <<'PY'
-from pathlib import Path
-import sys
-Path(sys.argv[1]).write_text(r'''#!/bin/sh
-set -eu
-output='' model='' sandbox='' effort='' workdir='' schema=''
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    --output-last-message) output=$2; shift 2 ;;
-    --output-schema) schema=$2; shift 2 ;;
-    --model) model=$2; shift 2 ;;
-    --sandbox) sandbox=$2; shift 2 ;;
-    -c) effort=$2; shift 2 ;;
-    -C) workdir=$2; shift 2 ;;
-    exec|--json|--ignore-user-config|--ignore-rules|--skip-git-repo-check|-) shift ;;
-    *) exit 90 ;;
-  esac
-done
-[ "$sandbox" = read-only ] && [ "$effort" = "model_reasoning_effort=\"${FAKE_EXPECTED_EFFORT:-high}\"" ] || exit 91
-[ "$model" = "${FAKE_EXPECTED_MODEL:-gpt-5.6-terra}" ] || exit 92
-case "$schema" in */plugins/advisor/advisor-response.schema.json) ;; *) exit 93 ;; esac
-case "$output" in "$CODEX_HOME"/.tmp/advisor-transport/run.*/response.*.json) ;; *) exit 94 ;; esac
-case "$workdir" in "$CODEX_HOME"/.tmp/advisor-transport/run.*/workdir.*) ;; *) exit 95 ;; esac
-[ "$(stat -f '%Lp' "$(dirname "$output")" 2>/dev/null || stat -c '%a' "$(dirname "$output")")" = 700 ] || exit 96
-
-attempt=1
-if [ -n "${FAKE_CODEX_COUNT_FILE-}" ]; then
-  [ ! -f "$FAKE_CODEX_COUNT_FILE" ] || attempt=$(($(cat "$FAKE_CODEX_COUNT_FILE") + 1))
-  printf '%s\n' "$attempt" >"$FAKE_CODEX_COUNT_FILE"
-fi
-if [ -n "${FAKE_CODEX_PROMPT_DIR-}" ]; then
-  dd of="$FAKE_CODEX_PROMPT_DIR/attempt.$attempt.txt" 2>/dev/null
-else
-  dd of=/dev/null 2>/dev/null
-fi
-[ -z "${FAKE_CODEX_MARKER-}" ] || : >"$FAKE_CODEX_MARKER"
-if [ "${FAKE_CODEX_CASE-valid}" = heartbeat ]; then sleep 11; fi
-case "$attempt" in
-  1) child=dddddddd-dddd-7ddd-8ddd-dddddddddddd ;;
-  2) child=abababab-abab-7aba-8aba-abababababab ;;
-  *) exit 97 ;;
-esac
-case "${FAKE_CODEX_CASE-valid}:$attempt" in
-  launcher-failure:*) exit 98 ;;
-  same-session:*) child=${FAKE_PARENT_ID:?} ;;
-  retry-reused-child:2) child=dddddddd-dddd-7ddd-8ddd-dddddddddddd ;;
-esac
-
-valid_response() {
-  printf '%s\n' '{"recommendation":"  neutral   path  ","why":"reason with\nspacing","strongest_objection":"objection","change_my_mind":"contrary evidence","acceptance_checks":["first check"," second   check "],"risks":"none","follow_up_areas":"none"}' >"$output"
-}
-neutral_22_response() {
-  printf '%s\n' \
-    'ADVISOR RESPONSE' \
-    'RECOMMENDATION: neutral path' \
-    '' \
-    'WHY: neutral reason' \
-    '' \
-    'STRONGEST OBJECTION: neutral objection' \
-    '' \
-    'CHANGE MY MIND: neutral evidence' \
-    '' \
-    'ACCEPTANCE CHECKS:' \
-    '- neutral check 1' \
-    '- neutral check 2' \
-    '- neutral check 3' \
-    '- neutral check 4' \
-    '- neutral check 5' \
-    '- neutral check 6' \
-    '- neutral check 7' \
-    '- neutral check 8' \
-    '' \
-    'RISKS: none' \
-    '' \
-    'FOLLOW-UP AREAS: none' >"$output"
-}
-
-case "${FAKE_CODEX_CASE-valid}:$attempt" in
-  neutral-22-first-valid-second:1|retry-reused-child:1|runtime-invalid-second:1) neutral_22_response ;;
-  legacy-text:*) neutral_22_response ;;
-  empty-output:*) : >"$output" ;;
-  invalid-twice:*) printf '%s\n' '{"recommendation":"path"' >"$output" ;;
-  concatenated:*)
-    printf '%s\n' \
-      '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none"}' \
-      '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none"}' >"$output"
-    ;;
-  truncated:*) printf '%s\n' '{"recommendation":"DO_NOT_LEAK_REJECTED"' >"$output" ;;
-  non-object:*) printf '%s\n' '["not","an","object"]' >"$output" ;;
-  duplicate-scalar:*) printf '%s\n' '{"recommendation":"path","why":"first","why":"DO_NOT_LEAK_REJECTED","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  duplicate-array:*) printf '%s\n' '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["first"],"acceptance_checks":["second"],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  container-scalar-overwrite:*) printf '%s\n' '{"recommendation":"path","why":{"nested":"DO_NOT_LEAK_REJECTED"},"why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  missing:*) printf '%s\n' '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"follow_up_areas":"none"}' >"$output" ;;
-  extra:*) printf '%s\n' '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none","extra":"DO_NOT_LEAK_REJECTED"}' >"$output" ;;
-  wrong-type:*) printf '%s\n' '{"recommendation":7,"why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  noncontiguous-array:*) printf '%s\n' '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["first",{"nested":"DO_NOT_LEAK_REJECTED"},"third"],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  blank-scalar:*) printf '%s\n' '{"recommendation":"path","why":"  \n ","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  blank-array-item:*) printf '%s\n' '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":["check"," \t "],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  empty-array:*) printf '%s\n' '{"recommendation":"path","why":"reason","strongest_objection":"objection","change_my_mind":"evidence","acceptance_checks":[],"risks":"none","follow_up_areas":"none"}' >"$output" ;;
-  *) valid_response ;;
-esac
+. "$verify_dir/installer.sh"
 
-if [ -n "${FAKE_CODEX_RESPONSE_CAPTURE_DIR-}" ]; then
-  cp "$output" "$FAKE_CODEX_RESPONSE_CAPTURE_DIR/attempt.$attempt.txt"
-fi
+. "$verify_dir/inspectors.sh"
 
-if [ "${FAKE_CODEX_CASE-valid}" = concurrent ]; then
-  consultation_dir=$(dirname "$output")
-  slot=${FAKE_CODEX_CONCURRENT_SLOT:?}
-  printf '%s\n' "$consultation_dir" >"$FAKE_CODEX_SYNC_DIR/dir.$slot"
-  : >"$FAKE_CODEX_SYNC_DIR/ready.$slot"
-  cycles=0
-  while [ ! -e "$FAKE_CODEX_SYNC_DIR/ready.1" ] || [ ! -e "$FAKE_CODEX_SYNC_DIR/ready.2" ]; do
-    cycles=$((cycles + 1)); [ "$cycles" -le 200 ] || exit 99; sleep 0.05
-  done
-  if [ "$slot" -eq 2 ]; then
-    cycles=0
-    while [ ! -e "$FAKE_CODEX_SYNC_DIR/release.2" ]; do
-      cycles=$((cycles + 1)); [ "$cycles" -le 200 ] || exit 100; sleep 0.05
-    done
-    [ -d "$consultation_dir" ] || exit 101
-    child=cdcdcdcd-cdcd-7dcd-8dcd-cdcdcdcdcdcd
-  fi
-fi
+. "$verify_dir/transport.sh"
 
-rollout=$CODEX_HOME/sessions/2026/08/30/rollout-fake-$child.jsonl
-runtime_policy=read-only
-case "${FAKE_CODEX_CASE-valid}:$attempt" in runtime-invalid-first:*|runtime-invalid-second:2) runtime_policy=workspace-write ;; esac
-runtime_originator=codex_exec
-case "${FAKE_CODEX_CASE-valid}" in desktop-valid) runtime_originator='Codex Desktop' ;; provenance-mismatch) runtime_originator='Codex desktop' ;; esac
-printf '%s\n' \
-  "{\"type\":\"session_meta\",\"payload\":{\"id\":\"$child\",\"source\":\"exec\",\"originator\":\"$runtime_originator\"}}" \
-  "{\"type\":\"turn_context\",\"payload\":{\"model\":\"$model\",\"effort\":\"high\",\"sandbox_policy\":{\"type\":\"$runtime_policy\"},\"permission_profile\":{\"type\":\"managed\"}}}" >"$rollout"
-printf '%s\n' "{\"type\":\"thread.started\",\"thread_id\":\"$child\"}"
-if [ "${FAKE_CODEX_CASE-valid}" = duplicate-thread ]; then
-  printf '%s\n' '{"type":"thread.started","thread_id":"34343434-3434-7343-8343-343434343434"}'
-fi
-''', encoding='utf-8')
-PY
-python3 - "$fake_bin/jq" "$real_jq" <<'PY'
-from pathlib import Path
-import sys
-target, real_jq = sys.argv[1:]
-Path(target).write_text(f'''#!/bin/sh
-set -eu
-if [ "${{FAKE_JQ_RENDER_FAILURE-}}" = 1 ] && [ "${{1-}}" = -r ]; then
-  case "${{2-}}" in *'"ADVISOR RESPONSE"'*) exit 70 ;; esac
-fi
-exec {real_jq!r} "$@"
-''', encoding='utf-8')
-PY
-chmod 700 "$fake_bin/codex" "$fake_bin/jq"
+. "$verify_dir/audit.sh"
 
-transport_parent=56565656-5656-7565-8565-565656565656
-valid_packet=$tmp/valid-packet.txt
-printf '%s\n' DECISION 'question' CONTEXT 'evidence' OPTIONS 'choice' BOUNDARIES 'limits' REQUEST 'challenge' >"$valid_packet"
-transport_out=$tmp/transport-out.json
-transport_err=$tmp/transport-err.txt
-assert_transport_clean() {
-  [ -d "$fake_home/.tmp/advisor-transport" ] || return 0
-  [ "$(find "$fake_home/.tmp/advisor-transport" -mindepth 1 -maxdepth 1 -type d -name 'run.*' | wc -l | tr -d ' ')" -eq 0 ] || fail "private consultation directory survived wrapper exit"
-}
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=valid FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$transport_out" 2>"$transport_err" || {
-    sed -n '1,20p' "$transport_err" >&2
-    fail "valid fake transport failed"
-  }
-[ "$(wc -l <"$transport_out" | tr -d ' ')" -eq 1 ] || fail "transport stdout was not one JSON line"
-jq -e '.status=="completed" and .runtime.agent_role=="advisor-terra" and .runtime.model=="gpt-5.6-terra" and .runtime.effort=="high" and .runtime.sandbox_policy_type=="read-only" and .runtime.transport=="codex-exec" and .response=="ADVISOR RESPONSE\nRECOMMENDATION: neutral path\nWHY: reason with spacing\nSTRONGEST OBJECTION: objection\nCHANGE MY MIND: contrary evidence\nACCEPTANCE CHECKS: first check; second check\nRISKS: none\nFOLLOW-UP AREAS: none\n"' "$transport_out" >/dev/null || fail "valid transport JSON or canonical render mismatch"
-assert_transport_clean
-for progress_line in 'launching advisor-terra (gpt-5.6-terra, high, read-only)' 'inspecting persisted runtime evidence' 'consultation verified'; do
-  grep -Fq "$progress_line" "$transport_err" || fail "transport stderr progress missing: $progress_line"
-done
-
-astra_transport_out=$tmp/astra-transport-out.json
-astra_transport_err=$tmp/astra-transport-err.txt
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=valid FAKE_EXPECTED_MODEL=gpt-6-astra FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-astra --parent-thread "$transport_parent" <"$valid_packet" >"$astra_transport_out" 2>"$astra_transport_err" || {
-    sed -n '1,20p' "$astra_transport_err" >&2
-    fail "valid fake Astra transport failed"
-  }
-jq -e '.status=="completed" and .selection.tier=="opt-in" and .selection.model=="gpt-6-astra" and .selection.effort=="high" and .selection.source=="explicit-fixed" and .runtime.model=="gpt-6-astra" and .runtime.effort=="high" and .runtime.sandbox_policy_type=="read-only"' "$astra_transport_out" >/dev/null || fail "explicit Astra alias did not remain fixed and isolated"
-if grep -Eq 'tier=(standard|specialist); model=gpt-6-astra|role=advisor-tier-(standard|specialist).*gpt-6-astra' "$transport"; then fail "Astra leaked into a normal tier route"; fi
-pass "explicit Astra/high fixed alias is isolated from Standard/Specialist defaults"
-
-heartbeat_err=$tmp/heartbeat-err.txt
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=heartbeat FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$tmp/heartbeat-out.json" 2>"$heartbeat_err" || fail "heartbeat transport fixture failed"
-[ "$(grep -Fc 'owned child invocation still running' "$heartbeat_err")" -eq 1 ] || fail "heartbeat was not emitted once and cleaned up"
-[ "$(wc -l <"$tmp/heartbeat-out.json" | tr -d ' ')" -eq 1 ] || fail "heartbeat fixture contaminated stdout"
-assert_transport_clean
-
-neutral_capture=$tmp/neutral-capture; neutral_prompts=$tmp/neutral-prompts
-mkdir "$neutral_capture" "$neutral_prompts"
-retry_count=$tmp/retry-count
-retry_err=$tmp/retry-err.txt
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=neutral-22-first-valid-second FAKE_CODEX_COUNT_FILE="$retry_count" FAKE_CODEX_RESPONSE_CAPTURE_DIR="$neutral_capture" FAKE_CODEX_PROMPT_DIR="$neutral_prompts" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$tmp/retry-out.json" 2>"$retry_err" || fail "neutral 22-line response did not retry successfully"
-[ "$(cat "$retry_count")" -eq 2 ] || fail "neutral 22-line response did not launch exactly one retry"
-[ "$(wc -l <"$neutral_capture/attempt.1.txt" | tr -d ' ')" -eq 22 ] || fail "neutral regression was not exactly 22 lines"
-awk 'NR==1&&$0=="ADVISOR RESPONSE"{a++} NR==2&&$0~/^RECOMMENDATION:/{a++} NR==4&&$0~/^WHY:/{a++} NR==6&&$0~/^STRONGEST OBJECTION:/{a++} NR==8&&$0~/^CHANGE MY MIND:/{a++} NR==10&&$0=="ACCEPTANCE CHECKS:"{a++} NR==20&&$0~/^RISKS:/{a++} NR==22&&$0~/^FOLLOW-UP AREAS:/{a++} (NR==3||NR==5||NR==7||NR==9||NR==19||NR==21)&&$0==""{b++} NR>=11&&NR<=18&&$0~/^- neutral check [1-8]$/{c++} END{exit !(a==8&&b==6&&c==8)}' "$neutral_capture/attempt.1.txt" || fail "neutral 22-line structure mismatch"
-grep -Fq 'class=legacy-text field=response' "$neutral_prompts/attempt.2.txt" || fail "corrective retry omitted redacted legacy-text class"
-if grep -Fq 'neutral check 1' "$neutral_prompts/attempt.2.txt"; then fail "corrective retry leaked rejected response"; fi
-jq -e '.status=="completed" and (.response|startswith("ADVISOR RESPONSE\nRECOMMENDATION:"))' "$tmp/retry-out.json" >/dev/null || fail "retry did not return only the valid second response"
-grep -Fq 'runtime-valid response failed validation; launching one fresh corrective retry (class=legacy-text field=response)' "$retry_err" || fail "corrective retry progress missing from stderr"
-assert_transport_clean
-
-twice_count=$tmp/twice-count
-twice_err=$tmp/twice-error
-if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=invalid-twice FAKE_CODEX_COUNT_FILE="$twice_count" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >/dev/null 2>"$twice_err"; then fail "transport accepted two invalid responses"; fi
-[ "$(cat "$twice_count")" -eq 2 ] || fail "invalid-twice did not stop after one retry"
-grep -Fq 'class=invalid-json field=response' "$twice_err" || fail "invalid JSON diagnostic mismatch"
-assert_transport_clean
-
-reused_count=$tmp/reused-count
-reused_err=$tmp/reused-err.txt
-if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=retry-reused-child FAKE_CODEX_COUNT_FILE="$reused_count" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >/dev/null 2>"$reused_err"; then fail "transport accepted a retry that reused the first child"; fi
-[ "$(cat "$reused_count")" -eq 2 ] || fail "reused-child retry did not stop after exactly two launches"
-grep -Fq 'retry reused the first child thread' "$reused_err" || fail "reused-child retry was not classified as terminal identity failure"
-
-for terminal_case in launcher-failure duplicate-thread same-session runtime-invalid-first; do
-  terminal_count=$tmp/terminal-count-$terminal_case
-  if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE="$terminal_case" FAKE_CODEX_COUNT_FILE="$terminal_count" FAKE_PARENT_ID="$transport_parent" \
-    sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >/dev/null 2>&1; then fail "transport accepted terminal case: $terminal_case"; fi
-  [ "$(cat "$terminal_count")" -eq 1 ] || fail "transport retried terminal case: $terminal_case"
-done
-
-second_runtime_count=$tmp/terminal-count-runtime-invalid-second
-if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=runtime-invalid-second FAKE_CODEX_COUNT_FILE="$second_runtime_count" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >/dev/null 2>&1; then fail "transport accepted runtime-invalid retry child"; fi
-[ "$(cat "$second_runtime_count")" -eq 2 ] || fail "runtime-invalid second child launched other than two total children"
-assert_transport_clean
-
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=desktop-valid FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$tmp/desktop-transport-out.json" 2>"$tmp/desktop-transport-err.txt" || fail "transport rejected exact Codex Desktop provenance"
-jq -e '.status=="completed" and .runtime.transport=="codex-exec" and .runtime.sandbox_policy_type=="read-only"' "$tmp/desktop-transport-out.json" >/dev/null || fail "desktop transport result mismatch"
-if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=provenance-mismatch FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >/dev/null 2>"$tmp/provenance-transport-err.txt"; then fail "transport accepted near-match provenance"; fi
-grep -Fq 'runtime_provenance_mismatch' "$tmp/provenance-transport-err.txt" || fail "transport did not preserve provenance mismatch category"
-
-misordered_packet=$tmp/misordered-packet.txt
-printf '%s\n' CONTEXT 'evidence' DECISION 'question' OPTIONS 'choice' BOUNDARIES 'limits' REQUEST 'challenge' >"$misordered_packet"
-marker=$tmp/fake-codex-called
-if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_MARKER="$marker" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$misordered_packet" >/dev/null 2>&1; then fail "transport accepted misordered packet headings"; fi
-[ ! -e "$marker" ] || fail "transport invoked codex before rejecting packet order"
-
-for diagnostic_spec in \
-  'empty-output:empty-output:response' \
-  'legacy-text:legacy-text:response' \
-  'concatenated:duplicate-or-overwritten-field:recommendation' \
-  'truncated:invalid-json:response' \
-  'non-object:wrong-type:response' \
-  'duplicate-scalar:duplicate-or-overwritten-field:why' \
-  'duplicate-array:duplicate-or-overwritten-field:acceptance_checks' \
-  'container-scalar-overwrite:duplicate-or-overwritten-field:why' \
-  'missing:missing-field:risks' \
-  'extra:extra-field:response' \
-  'wrong-type:wrong-type:recommendation' \
-  'noncontiguous-array:invalid-acceptance-checks:acceptance_checks' \
-  'blank-scalar:blank-field:why' \
-  'blank-array-item:blank-field:acceptance_checks' \
-  'empty-array:invalid-acceptance-checks:acceptance_checks'; do
-  rejected_case=${diagnostic_spec%%:*}
-  diagnostic_remainder=${diagnostic_spec#*:}
-  expected_class=${diagnostic_remainder%%:*}
-  expected_field=${diagnostic_remainder#*:}
-  rejected_count=$tmp/rejected-count-$rejected_case
-  rejected_out=$tmp/rejected-out-$rejected_case.txt
-  rejected_err=$tmp/rejected-err-$rejected_case.txt
-  if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE="$rejected_case" FAKE_CODEX_COUNT_FILE="$rejected_count" FAKE_PARENT_ID="$transport_parent" \
-    sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$rejected_out" 2>"$rejected_err"; then
-    fail "transport accepted fake case: $rejected_case"
-  fi
-  [ "$(cat "$rejected_count")" -eq 2 ] || fail "response validation case did not exercise exactly one fresh retry: $rejected_case"
-  grep -Fq "class=$expected_class field=$expected_field" "$rejected_err" || fail "response validation diagnostic mismatch: $rejected_case"
-  if grep -Fq 'DO_NOT_LEAK_REJECTED' "$rejected_out" "$rejected_err"; then fail "response validation leaked rejected content: $rejected_case"; fi
-  assert_transport_clean
-done
-
-render_count=$tmp/render-count
-render_err=$tmp/render-err
-if PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=valid FAKE_JQ_RENDER_FAILURE=1 FAKE_CODEX_COUNT_FILE="$render_count" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >/dev/null 2>"$render_err"; then fail "transport accepted render failure"; fi
-[ "$(cat "$render_count")" -eq 2 ] || fail "render failure did not stop after one corrective retry"
-grep -Fq 'class=render-failure field=response' "$render_err" || fail "render failure diagnostic mismatch"
-assert_transport_clean
-
-truncated_fixture=$tmp/truncated-parser.json
-printf '%s\n' '{"recommendation":"path"' >"$truncated_fixture"
-streaming_status=0
-jq --stream -c 'select(length == 2)' "$truncated_fixture" >"$tmp/truncated-parser-stream.jsonl" 2>/dev/null || streaming_status=$?
-[ "$streaming_status" -ne 0 ] || fail "streaming parser status did not reject truncated JSON"
-
-concurrent_sync=$tmp/concurrent-sync; mkdir "$concurrent_sync"
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=concurrent FAKE_CODEX_CONCURRENT_SLOT=1 FAKE_CODEX_SYNC_DIR="$concurrent_sync" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$tmp/concurrent-1.json" 2>"$tmp/concurrent-1.err" &
-concurrent_pid_1=$!
-PATH="$fake_bin:$PATH" CODEX_HOME="$fake_home" FAKE_CODEX_CASE=concurrent FAKE_CODEX_CONCURRENT_SLOT=2 FAKE_CODEX_SYNC_DIR="$concurrent_sync" FAKE_PARENT_ID="$transport_parent" \
-  sh "$transport" --role advisor-terra --parent-thread "$transport_parent" <"$valid_packet" >"$tmp/concurrent-2.json" 2>"$tmp/concurrent-2.err" &
-concurrent_pid_2=$!
-wait "$concurrent_pid_1" || fail "first concurrent transport failed"
-: >"$concurrent_sync/release.2"
-wait "$concurrent_pid_2" || fail "second concurrent transport lost its private directory"
-[ "$(cat "$concurrent_sync/dir.1")" != "$(cat "$concurrent_sync/dir.2")" ] || fail "concurrent transports reused a consultation directory"
-jq -e '.status=="completed"' "$tmp/concurrent-1.json" "$tmp/concurrent-2.json" >/dev/null || fail "concurrent transport result mismatch"
-assert_transport_clean
-pass "run-advisor behavioral transport: strict streamed JSON, duplicate/overwrite defense, nonblank semantics, exact eight-line renderer, neutral 22-line corrective retry, redacted diagnostics, two-child ceiling, terminal runtime failures, mode-0700 cleanup, concurrency isolation, stderr progress, and single JSON stdout"
-
-audit_sessions=$tmp/audit-sessions; mkdir -p "$audit_sessions/2026/01/01"
-python3 - "$audit_sessions/2026/01/01" <<'PY'
-import json,sys
-from pathlib import Path
-
-root=Path(sys.argv[1])
-def write(name, entries):
-    root.joinpath(name).write_text("".join(json.dumps(entry)+"\n" for entry in entries),encoding="utf-8")
-def stamp(second):
-    return f"2026-01-01T00:00:{second:02d}Z"
-def receipt(heading, **fields):
-    return heading+"\n"+"\n".join(f"{key}: {value}" for key,value in fields.items())+"\nDO_NOT_LEAK_SECRET_PROMPT api_key=sk-forbidden contact@example.test"
-def message(text, second):
-    return {"timestamp":stamp(second),"type":"response_item","payload":{"type":"message","role":"assistant","content":[{"type":"output_text","text":text}]}}
-def spawn(role, second):
-    return {"timestamp":stamp(second),"type":"event_msg","payload":{"type":"item_completed","item":{"id":f"spawn-{role}-{second}","type":"CollabAgentToolCall","tool":"spawn_agent","status":"completed","receiver_agents":[{"agent_role":role,"thread_id":f"receiver-{role}-{second}"}]}}}
-def legacy_spawn(role, second):
-    return {"timestamp":stamp(second),"type":"response_item","payload":{"id":f"legacy-{role}-{second}","type":"collab_tool_call","tool":"spawn_agent","status":"completed","receiver_agents":[{"agent_role":role,"thread_id":f"legacy-receiver-{role}-{second}"}]}}
-def request(role, second, call_id):
-    arguments=json.dumps({"agent_type":role,"fork_turns":"none","message":"DO_NOT_LEAK_REQUEST_PROMPT api_key=sk-request-secret","task_name":"private-task"})
-    return {"timestamp":stamp(second),"type":"response_item","payload":{"type":"function_call","name":"spawn_agent","namespace":"functions","call_id":call_id,"arguments":arguments}}
-def activity(thread_id, kind, second, item_id):
-    return {"timestamp":stamp(second),"type":"event_msg","payload":{"type":"item_completed","item":{"type":"SubAgentActivity","id":item_id,"agent_thread_id":thread_id,"agent_path":"DO_NOT_LEAK_AGENT_PATH","kind":kind}}}
-root_meta={"timestamp":"2025-12-31T23:59:00Z","type":"session_meta","payload":{"id":"root-private-id","agent_role":"root","source":{"private":"DO_NOT_LEAK_SOURCE"}}}
-duplicate_call=message(receipt("ADVISOR CALL",tier="Standard",role="advisor-terra",status="running"),2)
-write("root.jsonl",[
-    root_meta,
-    message(receipt("ADVISOR DECISION",route="consult"),1),
-    duplicate_call, duplicate_call,
-    spawn("advisor-terra",3), spawn("advisor-terra",3),
-    message(receipt("ADVISOR RESULT",status="completed",decision="accept"),4),
-    message(receipt("ADVISOR DECISION",route="skip"),5),
-    message(receipt("ADVISOR DECISION",route="unavailable"),6),
-    message(receipt("ADVISOR DECISION",route="forbidden"),7),
-    message("ADVISOR DECISION\nroute: consult\nroute: skip\nDO_NOT_LEAK_DUPLICATE_ROUTE",7),
-    message(receipt("ADVISOR CALL",tier="Specialist",role="advisor-sol",status="running"),8),
-    legacy_spawn("advisor-sol",9),
-    message(receipt("ADVISOR RESULT",status="unavailable",decision="blocked"),10),
-    spawn("sol_advisor",11), spawn("sol-advisor",12),
-    request("advisor-terra",13,"request-terra"), request("advisor-terra",13,"request-terra"),
-    request("advisor-sol",14,"request-sol"),
-    activity("terra-private-id","started",15,"activity-terra-started"),
-    activity("terra-private-id","interacted",15,"activity-terra-interacted"),
-    activity("terra-private-id","completed",16,"activity-terra-completed"),
-    activity("sol-private-id","started",17,"activity-sol-started"),
-    activity("sol-private-id","interrupted",17,"activity-sol-interrupted"),
-    activity("sol-private-id","completed",18,"activity-sol-completed"),
-    activity("sol-private-id","completed",18,"activity-sol-completed"),
-    spawn("advisor-astra",19),
-])
-terra_entries=[
-    {"timestamp":"2025-12-31T23:59:59Z","type":"session_meta","payload":{"agent_role":"advisor-terra","id":"terra-private-id","source":{"subagent":{"thread_spawn":{"agent_role":"advisor-terra"}}},"prompt":"DO_NOT_LEAK_TERRA_META"}},
-    {"timestamp":stamp(11),"type":"turn_context","payload":{"sandbox_policy":{"type":"read-only"}}},
-    message(receipt("ADVISOR DECISION",route="unavailable"),12),
-    {"timestamp":stamp(12),"type":"response_item","payload":{"type":"custom_tool_call","text":"DO_NOT_LEAK_TOOL"}},
-    {"timestamp":stamp(13),"type":"event_msg","payload":{"type":"token_count","info":{"total_token_usage":{"input_tokens":10,"cached_input_tokens":2,"output_tokens":3,"reasoning_output_tokens":4}}}},
-]
-write("terra.jsonl",terra_entries)
-write("terra-duplicate-session.jsonl",terra_entries)
-write("sol.jsonl",[
-    {"timestamp":stamp(20),"type":"session_meta","payload":{"agent_role":"advisor-sol","id":"sol-private-id","source":{"subagent":{"thread_spawn":{"agent_role":"advisor-sol"}}}}},
-    {"timestamp":stamp(22),"type":"turn_context","payload":{"sandbox_policy":{"type":"workspace-write"}}},
-    {"timestamp":stamp(23),"type":"response_item","payload":{"type":"message","role":"assistant","content":[{"type":"output_text","text":"DO_NOT_LEAK_RESPONSE"}]}},
-    {"timestamp":stamp(24),"type":"event_msg","payload":{"type":"token_count","info":{"total_token_usage":{"input_tokens":20,"cached_input_tokens":5,"output_tokens":6,"reasoning_output_tokens":7}}}},
-])
-write("astra.jsonl",[
-    {"timestamp":stamp(25),"type":"session_meta","payload":{"agent_role":"advisor-astra","id":"astra-private-id","source":{"subagent":{"thread_spawn":{"agent_role":"advisor-astra"}}}}},
-])
-# A legacy nested role mention is parent metadata, not exact current child metadata.
-write("legacy-nested-role.jsonl",[
-    {"timestamp":stamp(30),"type":"session_meta","payload":{"id":"legacy-private-id","source":{"subagent":{"thread_spawn":{"agent_role":"advisor-sol"}}}}},
-    {"timestamp":stamp(31),"type":"turn_context","payload":{"sandbox_policy":{"type":"read-only"}}},
-])
-# Exact child metadata with no activity in the selected window must not count.
-write("outside-window.jsonl",[
-    {"timestamp":"2026-01-02T00:00:00Z","type":"session_meta","payload":{"agent_role":"advisor-terra","id":"outside-private-id"}},
-    {"timestamp":"2026-01-02T00:00:01Z","type":"turn_context","payload":{"sandbox_policy":{"type":"read-only"}}},
-])
-PY
-audit_out=$tmp/advisor-audit.json
-audit_err=$tmp/advisor-audit.stderr
-audit_before=$(snapshot "$audit_sessions/2026/01/01")
-sh "$audit" --sessions-dir "$audit_sessions" --since 2026-01-01T00:00:00Z --until 2026-01-02T00:00:00Z >"$audit_out" 2>"$audit_err"
-audit_after=$(snapshot "$audit_sessions/2026/01/01")
-[ "$audit_before" = "$audit_after" ] || fail "advisor audit modified session fixtures"
-jq -e '
-  .schema_version==2 and .redacted==true and
-  .decisions=={"consult":1,"skip":1,"unavailable":1} and
-  .availability.decisions=="evidenced" and
-  .consultations.attempted==2 and
-  .consultations.advisor_child_sessions=={"total":3,"by_role":{"advisor-astra":1,"advisor-terra":1,"advisor-sol":1}} and
-  .consultations.parent_spawn_completions=={"total":3,"by_role":{"advisor-astra":1,"advisor-terra":1,"advisor-sol":1},"availability":"evidenced"} and
-  .consultations.parent_spawn_requests=={"count":2,"availability":"evidenced"} and
-  .consultations.parent_subagent_activity=={"count":6,"by_kind":{"started":2,"interacted":1,"completed":2,"interrupted":1},"availability":"evidenced"} and
-  .consultations.selected_roles=={"standard":1,"specialist":1} and
-  .consultations.dispositions=={"completed":1,"unavailable":1,"blocked":1,"accept":1,"modify":0,"reject":0} and
-  .runtime.sandbox_counts=={"read_only":1,"workspace_write":1,"other":0} and
-  .runtime.advisor_tool_calls==1 and
-  .runtime.child_durations=={"count":2,"total_ms":6000,"minimum_ms":2000,"maximum_ms":4000,"average_ms":3000,"availability":"evidenced"} and
-  .runtime.tokens=={"input":30,"cached_input":7,"output":9,"reasoning":11} and
-  .runtime.availability=={"sandbox_counts":"evidenced","advisor_tool_calls":"evidenced","tokens":"evidenced"} and
-  .stale_role_attempts=={"sol_advisor":1,"sol-advisor":1}
-' "$audit_out" >/dev/null || fail "advisor audit aggregate report mismatch"
-grep -Fq 'ADVISOR AUDIT: session enumeration started' "$audit_err" || fail "advisor audit lacks enumeration progress"
-grep -Fq 'ADVISOR AUDIT: session parsing started' "$audit_err" || fail "advisor audit lacks parsing progress"
-if grep -Eqi 'DO_NOT_LEAK|private-id|receiver-|request-|activity-|root\.jsonl|secret_prompt|api_key|contact@example|sk-forbidden|private-task' "$audit_out" "$audit_err"; then fail "advisor audit leaked fixture content or identifiers"; fi
-empty_sessions=$tmp/empty-audit-sessions; mkdir "$empty_sessions"
-empty_audit=$tmp/empty-advisor-audit.json
-sh "$audit" --sessions-dir "$empty_sessions" --since 2026-01-01T00:00:00Z --until 2026-01-02T00:00:00Z >"$empty_audit" 2>/dev/null
-jq -e '
-  .decisions=={"consult":0,"skip":0,"unavailable":0} and .availability.decisions=="unavailable" and
-  .consultations.advisor_child_sessions=={"total":0,"by_role":{"advisor-astra":0,"advisor-terra":0,"advisor-sol":0}} and
-  .consultations.parent_spawn_completions=={"total":null,"by_role":null,"availability":"unavailable"} and
-  .consultations.parent_spawn_requests=={"count":null,"availability":"unavailable"} and
-  .consultations.parent_subagent_activity=={"count":null,"by_kind":null,"availability":"unavailable"} and
-  .runtime.sandbox_counts==null and .runtime.advisor_tool_calls==null and
-  .runtime.tokens==null and .runtime.child_durations.availability=="unavailable" and
-  .runtime.availability=={"sandbox_counts":"unavailable","advisor_tool_calls":"unavailable","tokens":"unavailable"}
-' "$empty_audit" >/dev/null || fail "advisor audit guessed unavailable evidence"
-
-corroboration_sessions=$tmp/corroboration-audit-sessions; mkdir -p "$corroboration_sessions/2026/01/01"
-python3 - "$corroboration_sessions/2026/01/01" <<'PY'
-import json,sys
-from pathlib import Path
-root=Path(sys.argv[1])
-def write(name,entries): root.joinpath(name).write_text("".join(json.dumps(entry)+"\n" for entry in entries),encoding="utf-8")
-def entry(second,type_,payload): return {"timestamp":f"2026-01-01T00:00:{second:02d}Z","type":type_,"payload":payload}
-child_id="corroborated-child-private-id"
-write("child.jsonl",[
-  entry(1,"session_meta",{"id":child_id,"agent_role":"advisor-terra"}),
-  entry(2,"turn_context",{"sandbox_policy":{"type":"read-only"}}),
-])
-arguments=json.dumps({"agent_type":"advisor-sol","fork_turns":"none","message":"DO_NOT_LEAK_REQUEST_ONLY","task_name":"private-request"})
-write("parent.jsonl",[
-  entry(1,"session_meta",{"id":"corroboration-parent-private-id","agent_role":"root"}),
-  entry(2,"response_item",{"type":"function_call","name":"spawn_agent","call_id":"request-only-private-id","arguments":arguments}),
-  entry(3,"event_msg",{"type":"item_completed","item":{"type":"SubAgentActivity","id":"started-private-id","agent_thread_id":child_id,"agent_path":"DO_NOT_LEAK_PATH","kind":"started"}}),
-  entry(4,"event_msg",{"type":"item_completed","item":{"type":"SubAgentActivity","id":"completed-private-id","agent_thread_id":child_id,"agent_path":"DO_NOT_LEAK_PATH","kind":"completed"}}),
-])
-PY
-corroboration_audit=$tmp/corroboration-audit.json
-sh "$audit" --sessions-dir "$corroboration_sessions" --since 2026-01-01T00:00:00Z --until 2026-01-02T00:00:00Z >"$corroboration_audit" 2>/dev/null
-jq -e '
-  .consultations.advisor_child_sessions.total==1 and
-  .consultations.parent_spawn_completions=={"total":null,"by_role":null,"availability":"unavailable"} and
-  .consultations.parent_spawn_requests=={"count":1,"availability":"evidenced"} and
-  .consultations.parent_subagent_activity=={"count":2,"by_kind":{"started":1,"interacted":0,"completed":1,"interrupted":0},"availability":"evidenced"}
-' "$corroboration_audit" >/dev/null || fail "advisor audit inferred completion or role counts from current parent corroboration"
-if grep -Eqi 'DO_NOT_LEAK|private-id|private-request' "$corroboration_audit"; then fail "advisor audit leaked corroboration fixture content"; fi
-pass "advisor audit schema v2 current/legacy fixtures, exact decisions, current parent corroboration, fail-closed completion availability, window ordering, deduplication, redaction, unavailable evidence, and stderr progress"
-
-python3 - "$tmp/result.json" "$tmp/rerun-result.json" "$tmp/unnecessary-rerun-result.json" "$tmp/boundary-three-of-four.json" "$tmp/boundary-two-of-four.json" "$fixtures" <<'PY'
-import copy,json,sys
-result,rerun_result,unnecessary_result,threshold_pass_result,threshold_fail_result,fixtures=sys.argv[1:]; items=json.load(open(fixtures))["cases"]
-schemas=[]; n=0
-def trial(route,risk="standard"):
-  selected_role="advisor-terra" if risk=="standard" else "advisor-sol"
-  selected_model="gpt-5.6-terra" if risk=="standard" else "gpt-6-sol"
-  return {"route":route,"advisor_count":1 if route=="consult" else 0,"roles":[selected_role] if route=="consult" else [],"freshness":"distinct_receiver_thread" if route=="consult" else "none","model":selected_model if route=="consult" else "none","effort":"high" if route=="consult" else "none","sandbox":"read-only" if route=="consult" else "none","risk":risk,"selected_role":selected_role,"selected_model":selected_model}
-for name,flag in (("v1",False),("v2",True)):
-  cases=[]
-  for c in items:
-    route=c["expected"]; n+=1
-    cases.append({"id":c["id"],"final_route":route,"trials":[trial(route,c["risk"])]})
-  schemas.append({"name":name,"multi_agent_v2":flag,"cases":cases})
-data={"status":"pass","redacted":True,"subscription_only":True,"overage_disabled":True,"session_cap":40,"sessions_run":n,"nonmutation":{"live_home":{"before":"a","after":"a","unchanged":True},"marketplace":{"before":"b","after":"b","unchanged":True}},"schemas":schemas}
-json.dump(data,open(result,"w"),indent=2)
-
-# In each schema, force one boundary case to miss on trial 1, then match on trials
-# 2 and 3. The evaluator must accept the bounded 2-of-3 majority and account for
-# exactly four extra sessions across both schemas.
-rerun=copy.deepcopy(data)
-for schema in rerun["schemas"]:
-  case=next(c for c in schema["cases"] if c["id"]=="boundary-explicit-advisor")
-  case["trials"]=[trial("skip","standard"),trial("consult","standard"),trial("consult","standard")]
-rerun["sessions_run"] += 4
-json.dump(rerun,open(rerun_result,"w"),indent=2)
-
-# Three trials are invalid when the first trial already matched. Preserve the same
-# 2-of-3 final route so rejection proves the unnecessary-rerun guard specifically.
-unnecessary=copy.deepcopy(rerun)
-for schema in unnecessary["schemas"]:
-  case=next(c for c in schema["cases"] if c["id"]=="boundary-explicit-advisor")
-  case["trials"]=[trial("consult","standard"),trial("skip","standard"),trial("consult","standard")]
-json.dump(unnecessary,open(unnecessary_result,"w"),indent=2)
-
-# Hold trial counts, role identity, freshness, pins, and session accounting valid
-# while exercising the per-schema boundary_ok threshold itself. Exactly one wrong
-# boundary final route leaves 3/4 matches and must pass; two leave 2/4 and must fail.
-threshold_pass=copy.deepcopy(data)
-for schema in threshold_pass["schemas"]:
-  case=next(c for c in schema["cases"] if c["id"]=="boundary-no-delegation")
-  case["final_route"]="consult"
-  case["trials"]=[trial("consult","standard")]
-json.dump(threshold_pass,open(threshold_pass_result,"w"),indent=2)
+. "$verify_dir/evaluator.sh"
 
-threshold_fail=copy.deepcopy(threshold_pass)
-for schema in threshold_fail["schemas"]:
-  case=next(c for c in schema["cases"] if c["id"]=="boundary-explicit-advisor")
-  case["final_route"]="skip"
-  case["trials"]=[trial("skip","standard")]
-json.dump(threshold_fail,open(threshold_fail_result,"w"),indent=2)
-PY
-sh "$evaluator" --verify-result --result "$tmp/result.json" >/dev/null
-sh "$evaluator" --verify-result --result "$tmp/rerun-result.json" >/dev/null
-if sh "$evaluator" --verify-result --result "$tmp/unnecessary-rerun-result.json" >/dev/null 2>&1; then
-  fail "evaluator accepted an unnecessary three-trial boundary rerun"
-fi
-sh "$evaluator" --verify-result --result "$tmp/boundary-three-of-four.json" >/dev/null
-if sh "$evaluator" --verify-result --result "$tmp/boundary-two-of-four.json" >/dev/null 2>&1; then
-  fail "evaluator accepted only two of four matching boundary cases"
-fi
-printf '%s\n' '{"status":"unavailable","reason_type":"role_unavailable","redacted":true}' >"$tmp/unavailable.json"
-if sh "$evaluator" --verify-result --result "$tmp/unavailable.json" >/dev/null 2>&1; then fail "unavailable accepted without flag"; fi
-sh "$evaluator" --verify-result --result "$tmp/unavailable.json" --allow-unavailable >/dev/null
-printf '%s\n' '{"status":"unavailable","reason_type":"parent_runtime_unavailable","redacted":true}' >"$tmp/parent-unavailable.json"
-sh "$evaluator" --verify-result --result "$tmp/parent-unavailable.json" --allow-unavailable >/dev/null
-printf '%s\n' '{"status":"unavailable","reason_type":"runtime_evidence_unavailable","redacted":true,"nonmutation":{"live_home":{"before":"a","after":"a","unchanged":true},"marketplace":{"before":"b","after":"b","unchanged":true}}}' >"$tmp/unavailable-with-pair.json"
-sh "$evaluator" --verify-result --result "$tmp/unavailable-with-pair.json" --allow-unavailable >/dev/null
-printf '%s\n' '{"status":"unavailable","reason_type":"runtime_evidence_unavailable","redacted":true,"nonmutation":{"live_home":{"before":"a","after":"changed","unchanged":false},"marketplace":{"before":"b","after":"b","unchanged":true}}}' >"$tmp/unavailable-bad-pair.json"
-if sh "$evaluator" --verify-result --result "$tmp/unavailable-bad-pair.json" --allow-unavailable >/dev/null 2>&1; then
-  fail "evaluator accepted invalid paired nonmutation evidence on unavailable result"
-fi
-printf '%s\n' '{"status":"unavailable","reason_type":"role_unavailable","redacted":true,"api_key":"forbidden-value"}' >"$tmp/unavailable-secret.json"
-if sh "$evaluator" --verify-result --result "$tmp/unavailable-secret.json" --allow-unavailable >/dev/null 2>&1; then
-  fail "evaluator accepted a secret-like value in an unavailable result"
-fi
-for accepted_version in \
-  'codex-cli 0.150.1' 'codex 0.150.1' \
-  'codex-cli 1.2.3-beta.1' 'codex 1.2.3+build.7'; do
-  ADVISOR_VALIDATE_CLI_VERSION=$accepted_version sh "$evaluator" ||
-    fail "evaluator rejected supported Codex CLI version: $accepted_version"
-done
-for rejected_version in \
-  'other-cli 0.150.1' 'codex-cli' 'codex-cli 0.150' \
-  'codex-cli 0.150.1 unrelated' 'codex-cli 1.2.3-beta..1' \
-  'codex-cli 1.2.3+build+other' 'codex-cli 0.150.1
-other-cli 9.9.9'; do
-  if ADVISOR_VALIDATE_CLI_VERSION=$rejected_version sh "$evaluator" >/dev/null 2>&1; then
-    fail "evaluator accepted malformed or unrelated CLI version: $rejected_version"
-  fi
-done
-grep -Fq 'validate_cli_version "$version" || write_unavailable cli_incompatible' "$evaluator" || fail "live CLI version path bypasses the tested validator"
-feature_false='other_feature stable true
-multi_agent_v2                           stable             false
-another_feature experimental false'
-feature_true='other_feature stable false
-  multi_agent_v2    beta    true  '
-ADVISOR_VALIDATE_FEATURE_STATE=$feature_false ADVISOR_EXPECTED_FEATURE_STATE=false sh "$evaluator" ||
-  fail "evaluator rejected exact false feature-state evidence"
-ADVISOR_VALIDATE_FEATURE_STATE=$feature_true ADVISOR_EXPECTED_FEATURE_STATE=true sh "$evaluator" ||
-  fail "evaluator rejected exact true feature-state evidence"
-for rejected_feature_fixture in \
-  'other_feature stable false' \
-  'multi_agent_v2 removed false' \
-  'multi_agent_v2 stable true' \
-  'multi_agent_v2 stable false
-multi_agent_v2 stable false' \
-  'multi_agent_v2 stable false
-multi_agent_v2 stable true' \
-  'multi_agent_v2
-stable false' \
-  'note multi_agent_v2 stable false' \
-  'multi_agent_v2 stable false extra'; do
-  if ADVISOR_VALIDATE_FEATURE_STATE=$rejected_feature_fixture ADVISOR_EXPECTED_FEATURE_STATE=false sh "$evaluator" >/dev/null 2>&1; then
-    fail "evaluator accepted missing, removed, opposite, duplicate, conflicting, or malformed feature-state evidence"
-  fi
-done
-if ADVISOR_VALIDATE_FEATURE_STATE='multi_agent_v2 stable false' ADVISOR_EXPECTED_FEATURE_STATE=maybe sh "$evaluator" >/dev/null 2>&1; then
-  fail "evaluator accepted an invalid requested feature state"
-fi
-grep -Fq 'validate_feature_state "$feature_output" "$feature" || write_unavailable feature_state_unavailable' "$evaluator" || fail "live feature-state path bypasses the tested validator"
-ADVISOR_VALIDATE_EPHEMERAL_ROUTE=unavailable sh "$evaluator" ||
-  fail "evaluator rejected the required ephemeral unavailable route"
-for rejected_ephemeral_route in consult skip invalid ''; do
-  if ADVISOR_VALIDATE_EPHEMERAL_ROUTE=$rejected_ephemeral_route sh "$evaluator" >/dev/null 2>&1; then
-    fail "evaluator accepted a non-unavailable ephemeral route"
-  fi
-done
-grep -Fq 'require_ephemeral_unavailable_route "$(jq -r '\''.route'\'' "$evidence")" || fail "ephemeral trial bypassed unavailable parent preflight"' "$evaluator" ||
-  fail "live ephemeral route bypasses the tested fail-closed validator"
-
-python3 - "$tmp/runtime-events" <<'PY'
-import copy, json, sys
-from pathlib import Path
-
-root=Path(sys.argv[1]); root.mkdir()
-root_id="11111111-1111-7111-8111-111111111111"
-child_id="22222222-2222-7222-8222-222222222222"
-def message(route, extra=""):
-    return {"type":"item.completed","item":{"type":"agent_message","text":extra+f"ADVISOR_EVAL route={route}"}}
-def spawn(role="advisor-sol",model="gpt-6-sol",**changes):
-    item={"id":"spawn-1","type":"collab_tool_call","tool":"spawn_agent","receiver_thread_ids":[child_id],"receiver_agents":[{"agent_role":role,"thread_id":child_id}],"model":model,"reasoning_effort":"high","status":"completed"}
-    item.update(changes)
-    return {"type":"item.completed","item":item}
-def write(name, events):
-    (root/f"{name}.jsonl").write_text("".join(json.dumps(e)+"\n" for e in events),encoding="utf-8")
-base=[{"type":"thread.started","thread_id":root_id},spawn(),message("consult","PRIVATE PROMPT MUST NOT SURVIVE\n")]
-write("valid-consult",base)
-started=copy.deepcopy(base[1]); started["type"]="item.started"; started["item"]["status"]="in_progress"
-write("valid-lifecycle",[base[0],started,base[1],base[2]])
-write("valid-terra",[{"type":"thread.started","thread_id":root_id},spawn("advisor-terra","gpt-5.6-terra"),message("consult")])
-write("valid-skip",[{"type":"thread.started","thread_id":root_id},message("skip")])
-write("valid-unavailable",[{"type":"thread.started","thread_id":root_id},message("unavailable","ADVISOR DECISION\nroute: unavailable\n")])
-write("unavailable-call",[{"type":"thread.started","thread_id":root_id},message("unavailable","ADVISOR DECISION\nroute: unavailable\nADVISOR CALL\n")])
-write("unavailable-spawn",[{"type":"thread.started","thread_id":root_id},message("unavailable","ADVISOR DECISION\nroute: unavailable\n"),spawn(),message("unavailable")])
-write("fabricated-no-spawn",[{"type":"thread.started","thread_id":root_id},message("consult","advisor_count=1 role=advisor-sol model=gpt-6-sol\n")])
-write("empty-wait",[{"type":"thread.started","thread_id":root_id},{"type":"item.completed","item":{"type":"collab_tool_call","tool":"wait","receiver_thread_ids":[]}},message("consult")])
-write("duplicate-spawn",base[:2]+[copy.deepcopy(base[1]),base[2]])
-write("duplicate-started",[base[0],started,copy.deepcopy(started),base[1],base[2]])
-extra_spawn=copy.deepcopy(base[1]); extra_spawn["type"]="item.started"; extra_spawn["item"]["id"]="spawn-2"
-write("extra-uncompleted-spawn",[base[0],extra_spawn,base[1],base[2]])
-for name,changes in (
-    ("wrong-role",{"receiver_agents":[{"agent_role":"advisor-terra","thread_id":child_id}]}),
-    ("wrong-model",{"model":"gpt-5.6-terra"}),
-    ("wrong-effort",{"reasoning_effort":"medium"}),
-    ("root-equals-child",{"receiver_thread_ids":[root_id],"receiver_agents":[{"agent_role":"advisor-sol","thread_id":root_id}]}),
-    ("noncompleted",{"status":"failed"}),
-):
-    write(name,[{"type":"thread.started","thread_id":root_id},spawn(**changes),message("consult")])
-PY
-events=$tmp/runtime-events
-ADVISOR_PARSE_RUNTIME_EVIDENCE="$events/valid-consult.jsonl" ADVISOR_RUNTIME_EVIDENCE_OUT="$tmp/valid-consult.json" ADVISOR_EXPECTED_ROLE=advisor-sol ADVISOR_EXPECTED_MODEL=gpt-6-sol sh "$evaluator"
-jq -e '.route=="consult" and .advisor_count==1 and .roles==["advisor-sol"] and .freshness=="distinct_receiver_thread" and .model=="gpt-6-sol" and .effort=="high" and .sandbox=="read-only"' "$tmp/valid-consult.json" >/dev/null || fail "valid Sol consult spawn evidence was not derived exactly"
-ADVISOR_PARSE_RUNTIME_EVIDENCE="$events/valid-lifecycle.jsonl" ADVISOR_RUNTIME_EVIDENCE_OUT="$tmp/valid-lifecycle.json" ADVISOR_EXPECTED_ROLE=advisor-sol ADVISOR_EXPECTED_MODEL=gpt-6-sol sh "$evaluator"
-jq -e '.route=="consult" and .advisor_count==1 and .roles==["advisor-sol"]' "$tmp/valid-lifecycle.json" >/dev/null || fail "one logical spawn lifecycle was not accepted"
-ADVISOR_PARSE_RUNTIME_EVIDENCE="$events/valid-terra.jsonl" ADVISOR_RUNTIME_EVIDENCE_OUT="$tmp/valid-terra.json" ADVISOR_EXPECTED_ROLE=advisor-terra ADVISOR_EXPECTED_MODEL=gpt-5.6-terra sh "$evaluator"
-jq -e '.role==null and .roles==["advisor-terra"] and .model=="gpt-5.6-terra" and .effort=="high"' "$tmp/valid-terra.json" >/dev/null || fail "valid Terra consult spawn evidence was not derived exactly"
-ADVISOR_PARSE_RUNTIME_EVIDENCE="$events/valid-skip.jsonl" ADVISOR_RUNTIME_EVIDENCE_OUT="$tmp/valid-skip.json" ADVISOR_EXPECTED_ROLE=advisor-sol ADVISOR_EXPECTED_MODEL=gpt-6-sol sh "$evaluator"
-jq -e '.route=="skip" and .advisor_count==0 and .roles==[]' "$tmp/valid-skip.json" >/dev/null || fail "valid skip/no-spawn evidence was not derived exactly"
-ADVISOR_PARSE_RUNTIME_EVIDENCE="$events/valid-unavailable.jsonl" ADVISOR_RUNTIME_EVIDENCE_OUT="$tmp/valid-unavailable.json" ADVISOR_EXPECTED_ROLE=advisor-sol ADVISOR_EXPECTED_MODEL=gpt-6-sol sh "$evaluator"
-jq -e '.route=="unavailable" and .advisor_count==0 and .roles==[] and .freshness=="none"' "$tmp/valid-unavailable.json" >/dev/null || fail "valid unavailable/no-spawn preflight evidence was not derived exactly"
-for rejected_events in unavailable-call unavailable-spawn fabricated-no-spawn empty-wait duplicate-spawn duplicate-started extra-uncompleted-spawn wrong-role wrong-model wrong-effort root-equals-child noncompleted; do
-  if ADVISOR_PARSE_RUNTIME_EVIDENCE="$events/$rejected_events.jsonl" ADVISOR_RUNTIME_EVIDENCE_OUT="$tmp/rejected.json" ADVISOR_EXPECTED_ROLE=advisor-sol ADVISOR_EXPECTED_MODEL=gpt-6-sol sh "$evaluator" >/dev/null 2>&1; then
-    fail "runtime evidence parser accepted: $rejected_events"
-  fi
-done
-if grep -Eq '11111111|22222222|PRIVATE PROMPT' "$tmp/valid-consult.json"; then fail "runtime evidence output leaked raw prompt or thread identifiers"; fi
-grep -Fq 'parse_runtime_evidence "$raw" "$evidence" "$selected_role" "$selected_model" || write_unavailable runtime_evidence_unavailable' "$evaluator" || fail "live path bypasses the tested runtime evidence parser"
-grep -Fq 'route=unavailable' "$evaluator" || fail "ephemeral evaluator does not expect unavailable preflight"
-grep -Fq 'do not emit ADVISOR CALL, and do not spawn a child' "$evaluator" || fail "ephemeral evaluator permits a call or child spawn"
-
-for policy_case in \
-  'standard:advisor-terra gpt-5.6-terra' 'STANDARD:advisor-terra gpt-5.6-terra' \
-  'specialist:advisor-sol gpt-6-sol' 'SPECIALIST:advisor-sol gpt-6-sol'; do
-  risk=${policy_case%%:*}; wanted=${policy_case#*:}
-  actual=$(ADVISOR_SELECT_FOR_RISK=$risk sh "$evaluator")
-  [ "$actual" = "$wanted" ] || fail "wrong advisor role/model selection for $risk"
-done
-for invalid_risk in unknown security-adjacent important; do
-  if ADVISOR_SELECT_FOR_RISK=$invalid_risk sh "$evaluator" >/dev/null 2>&1; then
-    fail "advisor selection accepted unsupported risk: $invalid_risk"
-  fi
-done
-
-for exact_flag in \
-  'codex exec --json --ignore-user-config --ignore-rules --ephemeral "$feature_switch" multi_agent_v2' \
-  '-C "$project" --sandbox read-only --skip-git-repo-check "$eval_prompt" </dev/null' \
-  '-c "agents.advisor-terra.config_file=\"$runtime_home/agents/advisor-terra.toml\""' \
-  '-c "agents.advisor-sol.config_file=\"$runtime_home/agents/advisor-sol.toml\""' \
-  '-c "shell_environment_policy.set={CODEX_HOME=\"$runtime_home\"}"'; do
-  grep -Fq -- "$exact_flag" "$evaluator" || fail "live isolation invocation omits: $exact_flag"
-done
-for fixture_link in \
-  'ln -s "$plugin_dir/skills/consultation" "$project/.codex/skills/consultation"' \
-  'ln -s "$plugin_dir" "$project/plugins/advisor"'; do
-  grep -Fq "$fixture_link" "$evaluator" || fail "isolated project fixture omits: $fixture_link"
-done
-if grep -Eq 'CODEX_HOME=.*codex exec|auth\.json|codex plugin (add|marketplace)' "$evaluator"; then
-  fail "live evaluator overrides parent auth, handles auth files, or mutates plugin state"
-fi
-grep -Fq 'codex features "$feature_switch" multi_agent_v2 list' "$evaluator" || fail "feature override confirmation omits the explicit boolean override"
-grep -Fq "progress() { printf '%s\\n' \"EVAL: \$*\" >&2; }" "$evaluator" || fail "evaluator progress is not pinned to stderr"
-grep -Fq "session_cap\":40" "$evaluator" || fail "evaluator does not write the pooled cap"
-grep -Fq 'live_before=$(snapshot_live_state live-state-before)' "$evaluator" || fail "evaluator lacks scoped live-state before snapshot"
-grep -Fq 'live_after=$(snapshot_live_state live-state-after)' "$evaluator" || fail "evaluator lacks scoped live-state after snapshot"
-snapshot_before_line=$(grep -nF 'live_before=$(snapshot_live_state live-state-before)' "$evaluator" | awk -F: 'NR==1 {print $1}')
-for dependency in codex jq; do
-  dependency_line=$(grep -nF "command -v $dependency" "$evaluator" | awk -F: 'NR==1 {print $1}')
-  [ "$snapshot_before_line" -lt "$dependency_line" ] || fail "$dependency absence bypasses paired nonmutation evidence"
-done
-for scoped_path in 'config.toml' 'agents skills plugins' 'auth/session/cache excluded'; do
-  grep -Fq "$scoped_path" "$evaluator" || fail "live-state snapshot scope omits: $scoped_path"
-done
-if grep -Fq 'snapshot "$live_home"' "$evaluator"; then fail "evaluator hashes the entire authenticated Codex home"; fi
-grep -Fq 'progress "$label snapshot started"' "$evaluator" || fail "snapshot start progress is missing"
-grep -Fq 'progress "$label snapshot hashing: $count files"' "$evaluator" || fail "snapshot periodic file-count progress is missing"
-grep -Fq 'if [ $((count % 100)) -eq 0 ]' "$evaluator" || fail "snapshot progress interval is not pinned to 100 files"
-grep -Fq 'progress "$label snapshot complete ($count contract files; auth/session/cache excluded)"' "$evaluator" || fail "scoped snapshot completion progress is missing"
-grep -Fq 'shasum -a 256 "$file" >>"$digest_lines"' "$evaluator" || fail "snapshot per-file digests are not isolated from stdout"
-grep -Fq 'printf '\''%s\n'\'' "$digest"' "$evaluator" || fail "snapshot final digest stdout emission is missing"
-snapshot_start_line=$(grep -nF 'progress "$label snapshot started"' "$evaluator" | awk -F: 'NR==1 {print $1}')
-snapshot_find_line=$(grep -nF 'find "$live_home/$name" -type f -print' "$evaluator" | awk -F: 'NR==1 {print $1}')
-[ "$snapshot_start_line" -lt "$snapshot_find_line" ] || fail "snapshot traversal can start before visible progress"
-for phrase in \
-  'marketplace before snapshot started' 'marketplace before snapshot complete (1 file)' \
-  'marketplace after snapshot started' 'marketplace after snapshot complete (1 file)'; do
-  grep -Fq "$phrase" "$evaluator" || fail "marketplace snapshot progress omits: $phrase"
-done
-for phrase in 'multi_agent_v2' 'ephemeral' 'route: unavailable' 'no `ADVISOR CALL`' 'persisted fixtures' 'subscription-only' 'overage' 'Progress goes' 'before/after digests'; do grep -Fqi "$phrase" "$operations" || fail "operations omits evaluator parity: $phrase"; done
-pass "deterministic evaluator parsing, parent-unavailable ephemeral path, persisted read-only fixtures, exact pinned-role/model spawn evidence, lifecycle duplicate and extra-logical-spawn refusal, redaction, authenticated-parent isolation flags, mismatch reruns, Codex CLI and feature-state compatibility/refusal, typed unavailable, progress-visible snapshots, and nonmutation"
-
-grep -Fq 'https://github.com/DannyMac180/sol-advisor' "$notice" || fail "NOTICE upstream URL"
-grep -Fq '37b75cad535abdd46531f0227483a8842d045ab8' "$notice" || fail "NOTICE base"
-grep -Fq 'David Schmidt / Zero Delta LLC' "$notice" || fail "NOTICE maintainer"
-grep -Fq 'Daniel McAteer' "$notice" || fail "NOTICE original author"
-grep -Fq 'Copyright (c) 2026 Daniel McAteer' "$license" || fail "LICENSE copyright"
-if grep -Eqi 'substack|attentionheads' "$readme"; then fail "README retains Substack promotion"; fi
-for phrase in 'automatic' 'read-only' 'cannot' 'Plugins Directory' 'Codex CLI' 'Codex desktop' 'Privacy Policy' 'Terms of Service'; do grep -Fqi "$phrase" "$readme" || fail "README guidance omits: $phrase"; done
-for document in "$operations" "$repo_dir/SPEC.md" "$repo_dir/INVARIANTS.md"; do
-  for phrase in 'ADVISOR CALL' 'ADVISOR RESULT' 'unavailable' 'blocked' 'distinct Codex consultation'; do
-    grep -Fqi "$phrase" "$document" || fail "lifecycle documentation omits $phrase: $document"
-  done
-done
-pass "customer README, repository attribution, and lifecycle documentation parity"
-
-for document in "$readme" "$model_doc" "$walkthrough" "$operations"; do
-  grep -Fqi 'Codex home' "$document" || fail "configuration state location missing: $document"
-done
-for phrase in \
-  'gpt-6-astra' 'catalog presence is documentation' 'not an entitlement' \
-  'models test MODEL --effort EFFORT --authorize-usage --parent-thread THREAD_ID' \
-  '0.153.2' 'safe-unavailable' 'no background deletion service' \
-  'prunes records older than 30 days' 'transport contract' 'does not trigger a consultation' \
-  'configuration/catalog' \
-  'optional content-free usage journal' 'automatic Terra/Sol defaults' \
-  'separate explicit-only' 'Astra' \
-  '1.4.4 deployment record' 'not yet deployed'; do
-  grep -Fqi "$phrase" "$model_doc" || fail "model configuration documentation omits: $phrase"
-done
-grep -Eq '^Candidate content digest: `[0-9a-f]{64}`\.$' "$release_notes" || fail "candidate digest placeholder missing"
-[ "$(grep -Ec '^Candidate content digest: `[0-9a-f]{64}`\.$' "$release_notes")" -eq 1 ] || fail "candidate digest must appear exactly once"
-grep -Fqi 'historical archive fingerprint' "$release_notes" || fail "historical 1.3.4 fingerprint label missing"
-grep -Fqi 'Repository-root documentation is not in the ZIP' "$release_notes" || fail "ZIP boundary documentation missing"
-grep -Fqi 'Mocked' "$walkthrough" || fail "walkthrough must label mocked evidence"
-for phrase in \
-  'owner approved the website walkthrough and deployment' \
-  'website, privacy, and terms bytes are deployed and live-byte verified'; do
-  grep -Fqi "$phrase" "$walkthrough" || fail "walkthrough omits post-approval deployment evidence: $phrase"
-done
-pass "1.4 model, privacy, candidate walkthrough, release-history, and ZIP-boundary documentation"
+. "$verify_dir/release-docs.sh"
 
 python3 -m unittest discover -s "$plugin_dir/tests" -p 'test_advisor_*.py'
 python3 -m unittest "$package_test"
-pass "Advisor behavior tests and 17 candidate packaging tests"
+pass "Advisor behavior tests and candidate packaging tests"
 
 sh -n "$script_dir"/*.sh
 [ "$(stat -f '%Lp' "$parent_inspector" 2>/dev/null || stat -c '%a' "$parent_inspector")" = 644 ] || fail "parent inspector must remain mode 100644"
 pass "all shell syntax and stderr-progress contract"
-printf '%s\n' "VERIFY PASSED: Advisor 1.4.6 consultation-only static contract"
+printf '%s\n' "VERIFY PASSED: Advisor 1.4.10 consultation-only static contract"

Full technical diff · 47 changed fields

removed `/files/.codex-plugin~1assets~1composer-icon.png`

BEFORE

{
  "sha256": "ea58c4a9d45cdc20ed9ded61d690d96487004a5f12643f9bb09e53260eabbf6a",
  "size": 234585
}

AFTER

Field is absent

removed `/files/.codex-plugin~1assets~1logo.png`

BEFORE

{
  "sha256": "ea58c4a9d45cdc20ed9ded61d690d96487004a5f12643f9bb09e53260eabbf6a",
  "size": 234585
}

AFTER

Field is absent

changed `/files/.codex-plugin~1plugin.json/sha256`

BEFORE

"bd2b05047cb9c0e431191d6dbb7c5f8a6baae2afb5fe52f37ac8fed46588edac"

AFTER

"4ab3069acea26fc5863aaacaf2dadfe0052c9d68fa22eb0211da0440c7ad3d31"

changed `/files/.codex-plugin~1plugin.json/size`

BEFORE

AFTER

added `/files/LICENSE`

BEFORE

Field was absent

AFTER

{
  "sha256": "9bd605a064788e28a3961c76ba61142bed298270bfa96b06028ac450821a5258",
  "size": 1071
}

added `/files/NOTICE.md`

BEFORE

Field was absent

AFTER

{
  "sha256": "6fbd501f4d2dc5deb6656dbe7571ce7c78c59db8bac92416c41f2f7fd1891316",
  "size": 332
}

changed `/files/advisor.toml/sha256`

BEFORE

"55b952049fb9ac8b472f700321a5d92eb579605c7147797f41735b221ecab191"

AFTER

"73bbb4b5bad3eb5146af1e17c270517187028266da3c4a3db722e6adf81a71da"

changed `/files/advisor.toml/size`

BEFORE

AFTER

changed `/files/agents~1advisor-sol.toml/sha256`

BEFORE

"517f670937b2174dcd6467e39381b55d3ba133bd97c697c988bf77082dd1531d"

AFTER

"b3d58c2bd9164f0117338e9d620c3c668abf7eba12949bb840704b65d86c9a1f"

changed `/files/agents~1advisor-sol.toml/size`

BEFORE

AFTER

changed `/files/agents~1advisor-terra.toml/sha256`

BEFORE

"4b46bd1f354e17d0ed2eaa746fb3f838e2d5bee04ed44524b9557de1820b064e"

AFTER

"97e9beed9a0a571423a580b6d5190d9b6b2d65a31f5dcef694f02c0246dea1ee"

changed `/files/models.json/sha256`

BEFORE

"06f8c49d7943d56682a40633a6bb072831d087d6f589f25096c2042e8017a252"

AFTER

"7e6fa2bf8998c8c6f55534b15da19bccf6d239db74da517b9bf78d2063e4caa3"

changed `/files/models.json/size`

BEFORE

AFTER

changed `/files/scripts~1advisor-config.sh/sha256`

BEFORE

"41fe054137a6530e6d14c7a4811c857c131a95d81eae6a95080f0cf45d151e28"

AFTER

"3889220b9198ca419a3deece0a0d8f212965b5d9b95e62effa2b27df49abdd70"

changed `/files/scripts~1advisor-config.sh/size`

BEFORE

AFTER

added `/files/scripts~1advisor_canary.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "39c912ee039e087bb1abc614a6fa7eee56057084991cf66230528f4e1c1f7a5e",
  "size": 10505
}

added `/files/scripts~1advisor_catalog.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "c78f3898475acb922432cc0c78c70cd67b3c61e5072ec7b77a76789f7a51a01f",
  "size": 14818
}

changed `/files/scripts~1advisor_config.py/sha256`

BEFORE

"f5feee3e230f98a988b305f916eb4684282ca4597eebfa11286ab4acb1aa4c8d"

AFTER

"e7539d73a9317b4c39e3c222052fdabfa165ea274f43706b2f922523877e73bf"

changed `/files/scripts~1advisor_config.py/size`

BEFORE

AFTER

added `/files/scripts~1advisor_discovery.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "03b4df7bf8fc58b7ac3ed3576831ba128a616fd8817be4abe9faf3b97cb464d9",
  "size": 9135
}

added `/files/scripts~1advisor_doctor.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "0cd8973ace6fee18fab8400725090d919e73e3cde20a3bd8033029a1d529d603",
  "size": 9041
}

added `/files/scripts~1advisor_journal.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "6a2a994097b01fa8c956dcd73763565169e7ee5fca2cb05ee1fbca8bad852c88",
  "size": 9681
}

added `/files/scripts~1advisor_settings.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "8a3f89f0983534ed726cc1bb1dc8f7dcf14d0443e08dba655fa1d4692756be9d",
  "size": 13440
}

added `/files/scripts~1advisor_state.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "e788e9b64d2cdb21c52ca76e6a7b68b5d7695e449f66d80f440da0319118b56e",
  "size": 12326
}

changed `/files/scripts~1evaluate-triggers.sh/sha256`

BEFORE

"ead7570ec2086ed726820b56251596120107f8e7bc07caa028d6ee89342dd8fe"

AFTER

"e2a5d537e51a2c9c1cd31c0a8060e9fbdc7d9eecad3ccdbcc9c3baddf4f238c9"

changed `/files/scripts~1evaluate-triggers.sh/size`

BEFORE

AFTER

changed `/files/scripts~1install-agents.sh/sha256`

BEFORE

"59ac0e3cadae49cd6228d592a0e665aef80a0f03cd46e00f639c3c792753285f"

AFTER

"c8bcb94735ae0bdb276a05e68e69bba293155fe3644545bff0cd920208ebd83b"

changed `/files/scripts~1install-agents.sh/size`

BEFORE

AFTER

changed `/files/scripts~1run-advisor.sh/sha256`

BEFORE

"e93d33441b827c3b6cb87ea75cee87dd4e7d7c8381fdb1c676b8421f30e83131"

AFTER

"c31b5f6af99f5d577748260e63ea0cebc17ef55a7c20e93917358e2bf1afb4ab"

changed `/files/scripts~1run-advisor.sh/size`

BEFORE

AFTER

changed `/files/scripts~1verify.sh/sha256`

BEFORE

"06a5b9bceda7dfb693353744e75fb371e335f815be25e5dd0fe4b5c941f52566"

AFTER

"dde2181752a614b3b914b48dd62f29798185b6dbe3e5d57ddcbe068ef8ef0d62"

changed `/files/scripts~1verify.sh/size`

BEFORE

AFTER

removed `/files/settings.schema.json`

BEFORE

{
  "sha256": "2b38841cbc898b9da626845e23b6db002d71755a1ff16114e67fb2ad9b1a9cb5",
  "size": 1200
}

AFTER

Field is absent

changed `/files/skills~1consultation~1SKILL.md/sha256`

BEFORE

"8314e737292358a8731034058946cf53a534082e5d098f1d03ec5b4a24517dd5"

AFTER

"fc07af46962e0ddcdc0d4fadd53c959d7938580e624fcb959820105d92f5cc9f"

changed `/files/skills~1consultation~1SKILL.md/size`

BEFORE

AFTER

changed `/files/skills~1consultation~1references~1operations.md/sha256`

BEFORE

"3d82d8689478200f19ac76aa02375512a8c8bd096959b8c78f73d81b5c548004"

AFTER

"41f6790b742bf146e9f58ae2b7d5fc710e07f19b4ed2fe282cdd63475f621047"

changed `/files/skills~1consultation~1references~1operations.md/size`

BEFORE

AFTER

added `/files/tests~1advisor_transport_support.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "ab4d43ce97049e90f3902947c9251c087b681e5a2f6b963085b85b5c0b54ffd2",
  "size": 11089
}

changed `/files/tests~1test_advisor_cli.py/sha256`

BEFORE

"b1b2ad9415e560da63ff6f8f8cfb76233b828de6fb459f306e3a6b58b3100f64"

AFTER

"0edfa5b16f1d35ebb714b177ab4b6c12ad3f4647ab965e290e1c19415058540b"

changed `/files/tests~1test_advisor_cli.py/size`

BEFORE

AFTER

changed `/files/tests~1test_advisor_config.py/sha256`

BEFORE

"169b5aa46700a4f09c6ee0dbadf3d02b1b6c91465a356de38804d5ebdc8ed9dc"

AFTER

"aa52b9fadef51b8121f4da4038914058952c1268aac23b68e1d8c7dcddd9a677"

changed `/files/tests~1test_advisor_config.py/size`

BEFORE

AFTER

added `/files/tests~1test_advisor_setup.py`

BEFORE

Field was absent

AFTER

{
  "sha256": "88f7545477e62f2a3d4317e32410eecdd92ea907679fc64206eddbd824d12ed9",
  "size": 10603
}

changed `/files/tests~1test_advisor_transport.py/sha256`

BEFORE

"aa566e1057819c5c1385b8659ddb51eb1f7e55ec8551e2acdb52a1feadb9067f"

AFTER

"d5318adabba6b6c1d2d5b7c9d41d48f91ac6b61352f897e5368afbf1bcacc4b9"

changed `/files/tests~1test_advisor_transport.py/size`

BEFORE

AFTER

changed `/files/tests~1test_advisor_usage.py/sha256`

BEFORE

"d5a5d1ecf82c9a2254e3565d24d7854ef05442cbacc1725432503138f153f70b"

AFTER

"3cfe33013652669e3756f5945248ac33776ce7f03ab53435aca794ca50f53d68"

changed `/files/tests~1test_advisor_usage.py/size`

BEFORE

AFTER

Full snapshot data

{
  "files": {
    ".codex-plugin/plugin.json": {
      "sha256": "4ab3069acea26fc5863aaacaf2dadfe0052c9d68fa22eb0211da0440c7ad3d31",
      "size": 2503
    },
    "LICENSE": {
      "sha256": "9bd605a064788e28a3961c76ba61142bed298270bfa96b06028ac450821a5258",
      "size": 1071
    },
    "NOTICE.md": {
      "sha256": "6fbd501f4d2dc5deb6656dbe7571ce7c78c59db8bac92416c41f2f7fd1891316",
      "size": 332
    },
    "advisor-response.schema.json": {
      "sha256": "01019be4a32a8257d852d50ec791184e6edbfbaa39cafd61a575e990c9933c40",
      "size": 666
    },
    "advisor.toml": {
      "sha256": "73bbb4b5bad3eb5146af1e17c270517187028266da3c4a3db722e6adf81a71da",
      "size": 597
    },
    "agents/advisor-astra.toml": {
      "sha256": "355b6e0286a15900f64e8bf6a5e743b26eb4a9fdf7e282ef70c7adb61352f754",
      "size": 1582
    },
    "agents/advisor-sol.toml": {
      "sha256": "b3d58c2bd9164f0117338e9d620c3c668abf7eba12949bb840704b65d86c9a1f",
      "size": 1586
    },
    "agents/advisor-terra.toml": {
      "sha256": "97e9beed9a0a571423a580b6d5190d9b6b2d65a31f5dcef694f02c0246dea1ee",
      "size": 1597
    },
    "assets/advisor-composer-icon.png": {
      "sha256": "ea58c4a9d45cdc20ed9ded61d690d96487004a5f12643f9bb09e53260eabbf6a",
      "size": 234585
    },
    "assets/advisor-logo.png": {
      "sha256": "ea58c4a9d45cdc20ed9ded61d690d96487004a5f12643f9bb09e53260eabbf6a",
      "size": 234585
    },
    "evals/trigger-cases.json": {
      "sha256": "68aa2b683073c632d16f146c55598ff906044248ad85998aaac3f9074278cfc1",
      "size": 2943
    },
    "models.json": {
      "sha256": "7e6fa2bf8998c8c6f55534b15da19bccf6d239db74da517b9bf78d2063e4caa3",
      "size": 903
    },
    "scripts/advisor-audit.sh": {
      "sha256": "c8e905fbf62f620b273ff839f574a0f1a0367b46e6b839426f0c05721a886bc8",
      "size": 37485
    },
    "scripts/advisor-config.sh": {
      "sha256": "3889220b9198ca419a3deece0a0d8f212965b5d9b95e62effa2b27df49abdd70",
      "size": 692
    },
    "scripts/advisor_canary.py": {
      "sha256": "39c912ee039e087bb1abc614a6fa7eee56057084991cf66230528f4e1c1f7a5e",
      "size": 10505
    },
    "scripts/advisor_catalog.py": {
      "sha256": "c78f3898475acb922432cc0c78c70cd67b3c61e5072ec7b77a76789f7a51a01f",
      "size": 14818
    },
    "scripts/advisor_config.py": {
      "sha256": "e7539d73a9317b4c39e3c222052fdabfa165ea274f43706b2f922523877e73bf",
      "size": 16411
    },
    "scripts/advisor_discovery.py": {
      "sha256": "03b4df7bf8fc58b7ac3ed3576831ba128a616fd8817be4abe9faf3b97cb464d9",
      "size": 9135
    },
    "scripts/advisor_doctor.py": {
      "sha256": "0cd8973ace6fee18fab8400725090d919e73e3cde20a3bd8033029a1d529d603",
      "size": 9041
    },
    "scripts/advisor_journal.py": {
      "sha256": "6a2a994097b01fa8c956dcd73763565169e7ee5fca2cb05ee1fbca8bad852c88",
      "size": 9681
    },
    "scripts/advisor_process.py": {
      "sha256": "841274eebb90ef5d0a99fe26ab5f2ff30e86883dcb3d20bce112206625953c04",
      "size": 17793
    },
    "scripts/advisor_settings.py": {
      "sha256": "8a3f89f0983534ed726cc1bb1dc8f7dcf14d0443e08dba655fa1d4692756be9d",
      "size": 13440
    },
    "scripts/advisor_state.py": {
      "sha256": "e788e9b64d2cdb21c52ca76e6a7b68b5d7695e449f66d80f440da0319118b56e",
      "size": 12326
    },
    "scripts/evaluate-triggers.sh": {
      "sha256": "e2a5d537e51a2c9c1cd31c0a8060e9fbdc7d9eecad3ccdbcc9c3baddf4f238c9",
      "size": 25586
    },
    "scripts/inspect-agent-runtime.sh": {
      "sha256": "bb5d7d3011529e73899c76474527d8106486f67017ea09bccb107b36bc4e8831",
      "size": 4560
    },
    "scripts/inspect-parent-runtime.sh": {
      "sha256": "b647eb7ea5d00c2fe297840e7a4ad8a2e13e9ddedcd679cf89da3865f41080bd",
      "size": 2224
    },
    "scripts/install-agents.sh": {
      "sha256": "c8bcb94735ae0bdb276a05e68e69bba293155fe3644545bff0cd920208ebd83b",
      "size": 18620
    },
    "scripts/run-advisor.sh": {
      "sha256": "c31b5f6af99f5d577748260e63ea0cebc17ef55a7c20e93917358e2bf1afb4ab",
      "size": 27506
    },
    "scripts/verify.sh": {
      "sha256": "dde2181752a614b3b914b48dd62f29798185b6dbe3e5d57ddcbe068ef8ef0d62",
      "size": 4700
    },
    "skills/consultation/SKILL.md": {
      "sha256": "fc07af46962e0ddcdc0d4fadd53c959d7938580e624fcb959820105d92f5cc9f",
      "size": 17488
    },
    "skills/consultation/agents/openai.yaml": {
      "sha256": "3a9c1d3552e1d5aa94812fea0bc6af189a5bde271596ca8de7b3ea979e01a73f",
      "size": 312
    },
    "skills/consultation/references/operations.md": {
      "sha256": "41f6790b742bf146e9f58ae2b7d5fc710e07f19b4ed2fe282cdd63475f621047",
      "size": 22564
    },
    "tests/advisor_transport_support.py": {
      "sha256": "ab4d43ce97049e90f3902947c9251c087b681e5a2f6b963085b85b5c0b54ffd2",
      "size": 11089
    },
    "tests/test_advisor_cli.py": {
      "sha256": "0edfa5b16f1d35ebb714b177ab4b6c12ad3f4647ab965e290e1c19415058540b",
      "size": 27646
    },
    "tests/test_advisor_config.py": {
      "sha256": "aa52b9fadef51b8121f4da4038914058952c1268aac23b68e1d8c7dcddd9a677",
      "size": 28147
    },
    "tests/test_advisor_setup.py": {
      "sha256": "88f7545477e62f2a3d4317e32410eecdd92ea907679fc64206eddbd824d12ed9",
      "size": 10603
    },
    "tests/test_advisor_transport.py": {
      "sha256": "d5318adabba6b6c1d2d5b7c9d41d48f91ac6b61352f897e5368afbf1bcacc4b9",
      "size": 21224
    },
    "tests/test_advisor_usage.py": {
      "sha256": "3cfe33013652669e3756f5945248ac33776ce7f03ab53435aca794ca50f53d68",
      "size": 24870
    }
  }
}

SHA-256 of public snapshot: a367e114a58cede454294847a55b600b337e44eb1140d8192311a44c4c2da40e

Update to Codex Advisor

Package or technical metadata updated

Package file

Package file

Package file

Package file

Compare saved observations

Changed files

scripts/verify.sh

removed /files/.codex-plugin~1assets~1composer-icon.png

removed /files/.codex-plugin~1assets~1logo.png

changed /files/.codex-plugin~1plugin.json/sha256

changed /files/.codex-plugin~1plugin.json/size

added /files/LICENSE

added /files/NOTICE.md

changed /files/advisor.toml/sha256

changed /files/advisor.toml/size

changed /files/agents~1advisor-sol.toml/sha256

changed /files/agents~1advisor-sol.toml/size

changed /files/agents~1advisor-terra.toml/sha256

changed /files/models.json/sha256

changed /files/models.json/size

changed /files/scripts~1advisor-config.sh/sha256

changed /files/scripts~1advisor-config.sh/size

added /files/scripts~1advisor_canary.py

added /files/scripts~1advisor_catalog.py

changed /files/scripts~1advisor_config.py/sha256

changed /files/scripts~1advisor_config.py/size

added /files/scripts~1advisor_discovery.py

added /files/scripts~1advisor_doctor.py

added /files/scripts~1advisor_journal.py

added /files/scripts~1advisor_settings.py

added /files/scripts~1advisor_state.py

changed /files/scripts~1evaluate-triggers.sh/sha256

changed /files/scripts~1evaluate-triggers.sh/size

changed /files/scripts~1install-agents.sh/sha256

changed /files/scripts~1install-agents.sh/size

changed /files/scripts~1run-advisor.sh/sha256

changed /files/scripts~1run-advisor.sh/size

changed /files/scripts~1verify.sh/sha256

changed /files/scripts~1verify.sh/size

removed /files/settings.schema.json

changed /files/skills~1consultation~1SKILL.md/sha256

changed /files/skills~1consultation~1SKILL.md/size

changed /files/skills~1consultation~1references~1operations.md/sha256

changed /files/skills~1consultation~1references~1operations.md/size

added /files/tests~1advisor_transport_support.py

changed /files/tests~1test_advisor_cli.py/sha256

changed /files/tests~1test_advisor_cli.py/size

changed /files/tests~1test_advisor_config.py/sha256

changed /files/tests~1test_advisor_config.py/size

added /files/tests~1test_advisor_setup.py

changed /files/tests~1test_advisor_transport.py/sha256

changed /files/tests~1test_advisor_transport.py/size

changed /files/tests~1test_advisor_usage.py/sha256

changed /files/tests~1test_advisor_usage.py/size

removed `/files/.codex-plugin~1assets~1composer-icon.png`

removed `/files/.codex-plugin~1assets~1logo.png`

changed `/files/.codex-plugin~1plugin.json/sha256`

changed `/files/.codex-plugin~1plugin.json/size`

added `/files/LICENSE`

added `/files/NOTICE.md`

changed `/files/advisor.toml/sha256`

changed `/files/advisor.toml/size`

changed `/files/agents~1advisor-sol.toml/sha256`

changed `/files/agents~1advisor-sol.toml/size`

changed `/files/agents~1advisor-terra.toml/sha256`

changed `/files/models.json/sha256`

changed `/files/models.json/size`

changed `/files/scripts~1advisor-config.sh/sha256`

changed `/files/scripts~1advisor-config.sh/size`

added `/files/scripts~1advisor_canary.py`

added `/files/scripts~1advisor_catalog.py`

changed `/files/scripts~1advisor_config.py/sha256`

changed `/files/scripts~1advisor_config.py/size`

added `/files/scripts~1advisor_discovery.py`

added `/files/scripts~1advisor_doctor.py`

added `/files/scripts~1advisor_journal.py`

added `/files/scripts~1advisor_settings.py`

added `/files/scripts~1advisor_state.py`

changed `/files/scripts~1evaluate-triggers.sh/sha256`

changed `/files/scripts~1evaluate-triggers.sh/size`

changed `/files/scripts~1install-agents.sh/sha256`

changed `/files/scripts~1install-agents.sh/size`

changed `/files/scripts~1run-advisor.sh/sha256`

changed `/files/scripts~1run-advisor.sh/size`

changed `/files/scripts~1verify.sh/sha256`

changed `/files/scripts~1verify.sh/size`

removed `/files/settings.schema.json`

changed `/files/skills~1consultation~1SKILL.md/sha256`

changed `/files/skills~1consultation~1SKILL.md/size`

changed `/files/skills~1consultation~1references~1operations.md/sha256`

changed `/files/skills~1consultation~1references~1operations.md/size`

added `/files/tests~1advisor_transport_support.py`

changed `/files/tests~1test_advisor_cli.py/sha256`

changed `/files/tests~1test_advisor_cli.py/size`

changed `/files/tests~1test_advisor_config.py/sha256`

changed `/files/tests~1test_advisor_config.py/size`

added `/files/tests~1test_advisor_setup.py`

changed `/files/tests~1test_advisor_transport.py/sha256`

changed `/files/tests~1test_advisor_transport.py/size`

changed `/files/tests~1test_advisor_usage.py/sha256`

changed `/files/tests~1test_advisor_usage.py/size`