[object Object]

← back to Ticket System

Verify isolated retained preflight and ordered overnight cycle

65c4fa28d85657ff68d497d3f6dd45f7dd69b292 · 2026-09-11 01:40:39 -0700 · Steve Abrams

Files touched

Diff

commit 65c4fa28d85657ff68d497d3f6dd45f7dd69b292
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Fri Sep 11 01:40:39 2026 -0700

    Verify isolated retained preflight and ordered overnight cycle
---
 .../cycle-20260911T0823Z.lfFFf3/REPORT.md          |  16 +-
 .../cycle-20260911T0823Z.lfFFf3/assess.cjs         |  12 +
 .../closing-candidate-acceptance.json              |  14 +
 .../closing-candidate-regression/drift-panel.sh    | 109 +++++++
 .../duplicate-manifest.codex                       |   3 +
 .../duplicate-manifest.log                         |   2 +
 .../closing-candidate-regression/duplicate.tsv     |   4 +
 .../closing-candidate-regression/e2e-proof.json    | 150 ++++++++++
 .../closing-candidate-regression/hash-drift.codex  |   3 +
 .../closing-candidate-regression/hash-drift.log    |   2 +
 .../closing-candidate-regression/isolation.tsv     |   3 +
 .../missing-entry.codex                            |   3 +
 .../closing-candidate-regression/missing-entry.log |   2 +
 .../closing-candidate-regression/missing-entry.tsv |   2 +
 .../missing-manifest.codex                         |   3 +
 .../missing-manifest.log                           |   2 +
 .../closing-candidate-regression/positive.log      |  12 +
 .../unisolated-cli.codex                           |   3 +
 .../unisolated-cli.log                             |   5 +
 .../unisolated-panel.sh                            | 107 +++++++
 .../closing-candidate-replay.json                  | 150 ++++++++++
 .../closing-candidate-runtime/positive/agents.log  |  13 +
 .../positive/agents/claude.txt                     |   1 +
 .../positive/agents/codex-debate.cli.log           |   0
 .../positive/agents/codex-debate.txt               |   3 +
 .../positive/agents/codex.cli.log                  |   0
 .../positive/agents/codex.txt                      |   3 +
 .../positive/agents/grok.txt                       |   1 +
 .../positive/agents/kimi.txt                       |   1 +
 .../positive/agents/muse.txt                       |   1 +
 .../positive/agents/question.txt                   |   1 +
 .../positive/agents/qwen.txt                       |   1 +
 .../closing-candidate-runtime/positive/bin/claude  |   3 +
 .../closing-candidate-runtime/positive/bin/codex   |  10 +
 .../closing-candidate-runtime/positive/bin/curl    |   3 +
 .../closing-candidate-runtime/positive/bin/node    |   3 +
 .../closing-candidate-runtime/positive/bin/timeout |   3 +
 .../closing-candidate-runtime/positive/calls.log   |  34 +++
 .../closing-candidate-runtime/positive/legacy.log  |  13 +
 .../positive/legacy/codex.cli.log                  |   0
 .../positive/legacy/codex.txt                      |   3 +
 .../positive/legacy/exo.txt                        |   1 +
 .../positive/legacy/grok.txt                       |   1 +
 .../positive/legacy/heretic.txt                    |   1 +
 .../positive/legacy/kimi.txt                       |   1 +
 .../positive/legacy/muse.txt                       |   1 +
 .../positive/legacy/question.txt                   |   1 +
 .../positive/legacy/qwen.txt                       |   1 +
 .../closing-candidate-runtime/positive/post.log    |   1 +
 .../closing-checks.json                            | 328 +++++++++++++++++++++
 .../closing_candidate.py                           |  20 ++
 .../cody/extra-negatives.py                        |  26 ++
 .../dtd-final/claude.txt                           |   1 +
 .../dtd-final/codex-debate.cli.log                 | 113 +++++++
 .../dtd-final/codex-debate.txt                     |   9 +
 .../dtd-final/codex.cli.log                        |  76 +++++
 .../dtd-final/codex.txt                            |   3 +
 .../cycle-20260911T0823Z.lfFFf3/dtd-final/grok.txt |   1 +
 .../cycle-20260911T0823Z.lfFFf3/dtd-final/kimi.txt |   1 +
 .../cycle-20260911T0823Z.lfFFf3/dtd-final/muse.txt |   1 +
 .../dtd-final/question.txt                         |   1 +
 .../cycle-20260911T0823Z.lfFFf3/dtd-final/qwen.txt |   2 +
 .../final-dtd-verdict.json                         |  18 ++
 .../cycle-20260911T0823Z.lfFFf3/new-memos.json     |   9 +
 .../ordered-dispositions.json                      |   4 +-
 .../parent-candidate-regression/drift-panel.sh     | 109 +++++++
 .../duplicate-manifest.codex                       |   3 +
 .../duplicate-manifest.log                         |   2 +
 .../parent-candidate-regression/duplicate.tsv      |   4 +
 .../parent-candidate-regression/e2e-proof.json     | 150 ++++++++++
 .../parent-candidate-regression/hash-drift.codex   |   3 +
 .../parent-candidate-regression/hash-drift.log     |   2 +
 .../parent-candidate-regression/isolation.tsv      |   3 +
 .../missing-entry.codex                            |   3 +
 .../parent-candidate-regression/missing-entry.log  |   2 +
 .../parent-candidate-regression/missing-entry.tsv  |   2 +
 .../missing-manifest.codex                         |   3 +
 .../missing-manifest.log                           |   2 +
 .../parent-candidate-regression/positive.log       |  12 +
 .../unisolated-cli.codex                           |   3 +
 .../parent-candidate-regression/unisolated-cli.log |   5 +
 .../unisolated-panel.sh                            | 107 +++++++
 .../parent-candidate-runtime/positive/agents.log   |  13 +
 .../positive/agents/claude.txt                     |   1 +
 .../positive/agents/codex-debate.cli.log           |   0
 .../positive/agents/codex-debate.txt               |   3 +
 .../positive/agents/codex.cli.log                  |   0
 .../positive/agents/codex.txt                      |   3 +
 .../positive/agents/grok.txt                       |   1 +
 .../positive/agents/kimi.txt                       |   1 +
 .../positive/agents/muse.txt                       |   1 +
 .../positive/agents/question.txt                   |   1 +
 .../positive/agents/qwen.txt                       |   1 +
 .../parent-candidate-runtime/positive/bin/claude   |   3 +
 .../parent-candidate-runtime/positive/bin/codex    |  10 +
 .../parent-candidate-runtime/positive/bin/curl     |   3 +
 .../parent-candidate-runtime/positive/bin/node     |   3 +
 .../parent-candidate-runtime/positive/bin/timeout  |   3 +
 .../parent-candidate-runtime/positive/calls.log    |  34 +++
 .../parent-candidate-runtime/positive/legacy.log   |  13 +
 .../positive/legacy/codex.cli.log                  |   0
 .../positive/legacy/codex.txt                      |   3 +
 .../positive/legacy/exo.txt                        |   1 +
 .../positive/legacy/grok.txt                       |   1 +
 .../positive/legacy/heretic.txt                    |   1 +
 .../positive/legacy/kimi.txt                       |   1 +
 .../positive/legacy/muse.txt                       |   1 +
 .../positive/legacy/question.txt                   |   1 +
 .../positive/legacy/qwen.txt                       |   1 +
 .../parent-candidate-runtime/positive/post.log     |   1 +
 .../preflight11456/FINAL-HOLD-MEMO.md              |  19 ++
 .../preflight11456/regression/drift-panel.sh       | 109 +++++++
 .../preflight11456/regression/unisolated-panel.sh  | 107 +++++++
 .../preflight11456/scripts/verify-zero-cost-dtd.sh | 123 ++++++++
 .../test/verify-zero-cost-dtd-retained.py          |  57 ++++
 .../verification/e2e-proof.json                    |  53 ++++
 .../cycle-20260911T0823Z.lfFFf3/verify_cycle.py    |  48 +++
 117 files changed, 2355 insertions(+), 6 deletions(-)

diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/REPORT.md b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/REPORT.md
index 265aa34a..3d1d63f8 100644
--- a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/REPORT.md
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/REPORT.md
@@ -1,6 +1,10 @@
-# Cycle 2026-09-11 08:23Z — ordered assessment
+# Cycle 2026-09-11 08:23Z
 
-One isolated TK-11456 preflight increment in progress. No operational source closures. Original source owners remain unchanged except the resumed source already assigned to this loop. Existing launchd supplies the next cycle; no schedule was changed.
+One of six execution slots used: TK-11456 isolated compatible preflight `e0c8af2` prepared and independently verified. Zero operational source closures. Source TK-11456 is blocked on exact integration approval and remaining operational proof.
+
+DTD: A2/2 valid voters, postKEEP. Cody:5/5SHIP IT isolatedartifact. FinalDTD:SHIP2/2valid,postKEEP, localpreparation only. Four unavailable/disabled voters abstained in each panel. Strongest objection retained: dynamic absent-environment and live runner proof are missing. No code correction remained after review; the reproduced temporary evidence-link defect was corrected.
+
+Closing proof: fresh durablebundlecheckout, positiveCLI and5failurecasesPASS;8installed/controlhashesunchanged;61actualAPI/auth/canonical/schedulerchecksPASS. DynamicabsenceSKIP; installedintegrationSKIP. All test state retained. Cost:$0 incrementalprovider/APIspend.
 
 | Position | Ticket | Disposition | Exact remaining condition |
 |---:|---|---|---|
@@ -18,7 +22,7 @@ One isolated TK-11456 preflight increment in progress. No operational source clo
 | 12 | TK-11424 | prepared-gated | 0e843273 adapter complete,0real fills;226families lack acquired/applicable trustworthy source specs. |
 | 13 | TK-11387 | external-blocked | Fresh canary activity/content and eligible trade-recipient membership/consent plus native CC-Shopify integration state missing. Existing thresholds would duplicate history; no exact local canary artifact found. |
 | 14 | TK-11432 | prepared-gated | Producer/consumer/error fix complete; retired governing API pin and actual919identity receipt unresolved. |
-| 15 | TK-11456 | execute-local | First new safe local candidate: isolated retained-temp preflight; DTD and execution pending. |
+| 15 | TK-11456 | execute-local | Isolated retained-temp preflight e0c8af2 built and parent CLI-replayed; inherited controls and installed files preserved. Adoption/real runner outcome and dynamic missing-environment proof remain HOLD. |
 | 16 | TK-11347 | external-blocked | Numeric authoritative wholesale evidence absent; linked vendor draft says no price sheets, quote-based. |
 | 17 | TK-11345 | prepared-gated | Actual Jill draft exists and names thread/recipient/attachment; _done does not prove sent. Current thread and send authorization needed. |
 | 18 | TK-11250 | external-blocked | Vendor prices absent; no safe variant-price inference or quote-tag removal. |
@@ -29,6 +33,8 @@ One isolated TK-11456 preflight increment in progress. No operational source clo
 | 23 | TK-11428 | prepared-gated | 35site articles and GSC metadata prepared; current token/property verification/account outcome absent. |
 | 24 | TK-11437 | prepared-gated | Prior AUTO0,8filed pass already completed; residual specific gates not execution authority. |
 
-All 24 canonical records were read before deciding. Owner-source timestamps are recorded separately from owner activity elsewhere and loop updates. Ticketmaster scoring is evidence only and did not reorder the queue. No new source-specific active editor was established; this is not proof that all owners are inactive.
+15prepared-gated,5external-blocked,3no-safe-increment,1execute-local. No deferred-execution-cap items. All24canonicalrecords and suppliedorder retained; source-owner timestamps distinguished from owner-anywhere and loop activity. Ticketmaster did not reorder the queue.15prior memos freshly rehashed; historic measurements not relabeled current.
+
+New exact proposal: /Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11456-retained-preflight-e0c8af2-HOLD.md
 
-Fifteen existing approval memos were re-read and matched their recorded digests. Historical test results remain historical; no new live catalog, mail, or account outcome is claimed. The preflight candidate and final DTD/Cody outcomes will be appended on completion.
+Existing launchd600second schedule remains loaded;STOPPEDabsent. No schedule changes. Exit permits the next freshqueuecycle. Next seed: preserve TK11456exactapproval/validationlimits; reassess fresh suppliedboard for changed authoritativeinputs or newly bounded localwork. Do not rerun the incompatible installed preflight inside a worker.
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/assess.cjs b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/assess.cjs
new file mode 100644
index 00000000..e0c994f1
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/assess.cjs
@@ -0,0 +1,12 @@
+const fs=require('fs'),crypto=require('crypto'),lib=require('/Users/macstudio3/Projects/ticket-system/lib.js');
+const dir=__dirname;
+const nums=[11395,11455,11363,11398,11384,11412,11420,11341,11454,11365,11435,11424,11387,11432,11456,11347,11345,11250,11436,11441,11427,11440,11428,11437];
+const ranks=[1,14,19,24,28,29,41,43,57,59,60,61,62,63,74,82,83,87,88,89,90,91,92,93];
+const prior=JSON.parse(fs.readFileSync('/Users/macstudio3/Projects/ticket-system/data/codex-yoloforever/ledger.jsonl','utf8').trim().split('\n').at(-1));
+const old=prior.ordered_dispositions||prior.dispositions;
+const raw=fs.readFileSync(lib.EVENTS,'utf8'), events=raw.trim().split('\n').filter(x=>x.trim()).map(x=>JSON.parse(x));
+let tm={};try{tm=JSON.parse(fs.readFileSync('/Users/macstudio3/.claude/skills/ticketmaster/state/latest.json','utf8'));}catch{}
+const result=nums.map((n,i)=>{const t=[...lib.tickets().values()].find(t=>lib.idNum(t.id)===n);const own=events.filter(e=>(e.agent||e.from)===t.assignee);const priorRow=old.find(x=>x.ticket===t.id);fs.writeFileSync(`${dir}/${n}.json`,JSON.stringify(t,null,2));return {position:i+1,rank:ranks[i],ticket:t.id,assignee:t.assignee,status:t.status,canonical_read_at:new Date().toISOString(),owner_last_source:own.filter(e=>e.id===t.id).at(-1)?.ts,owner_last_anywhere:own.at(-1)?.ts,updated_at:t.updated_at,prior_disposition:priorRow?.disposition,prior_reason:priorRow?.reason,history_events:[...t.comments,...t.actions].sort((a,b)=>a.ts.localeCompare(b.ts)),blocker:t.blocker,ticketmaster:(tm.top||[]).find(x=>x.id===t.id),evidence:`${dir}/${n}.json`};});
+fs.writeFileSync(`${dir}/assessment.json`,JSON.stringify(result,null,2));
+fs.writeFileSync(`${dir}/canonical-meta.json`,JSON.stringify({read_at:new Date().toISOString(),path:lib.EVENTS,sha256:crypto.createHash('sha256').update(raw).digest('hex'),bytes:Buffer.byteLength(raw),ticketmaster_ts:tm.ts,prior_evidence:prior.evidence_dir},null,2));
+for(const r of result.slice(Number(process.argv[2]||0),Number(process.argv[3]||24))){console.log(JSON.stringify({...r,history_events:r.history_events.slice(-3)}));}
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-acceptance.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-acceptance.json
new file mode 100644
index 00000000..48ef2e1c
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-acceptance.json
@@ -0,0 +1,14 @@
+{
+  "timestamp": "2026-09-11T08:39:00.445218+00:00",
+  "verdict": "PASS tested isolated boundary only",
+  "candidate_commit": "e0c8af26e935daa34f08ac55bd9ed41a01054173",
+  "rehydrated_from_durable_bundle": true,
+  "checkout": "/private/tmp/cycle0823-closing-candidate-exr11os_",
+  "check_count": 7,
+  "critical_source_limits": [
+    "Dynamic missing-environment proof SKIP",
+    "Installed integration/operational runner untested; source partial/HOLD"
+  ],
+  "retention": "Fresh checkout and every CLI fixture/runtime directory retained",
+  "evidence": "closing-candidate-replay.json"
+}
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/drift-panel.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/drift-panel.sh
new file mode 100644
index 00000000..3163a4ef
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/drift-panel.sh
@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+# DTD six-model panel: Claude + Codex + Qwen + Grok + Kimi + Muse.
+# Usage: bash scripts/panel.sh "<forced-choice question>"
+set -u
+
+QUESTION="${1:?usage: panel.sh \"<question>\"}"
+CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac
+RUN_ID="${RUN_ID:-$(date +%Y%m%d-%H%M%S)-$$-$RANDOM}"
+DIR="${DTD_DIR:-/tmp/dtd-$RUN_ID}"
+mkdir -p "$DIR"
+printf '%s' "$QUESTION" > "$DIR/question.txt"
+
+SECRETS_ENV="$HOME/Projects/secrets-manager/.env"
+key_from_cascade() {
+  local key="$1" file value=""
+  for file in "$HOME/.claude/skills/dtd/.env" "$SECRETS_ENV" /root/DW-Agents/.env; do
+    [[ -n "$value" || ! -f "$file" ]] && continue
+    value=$(grep "^${key}=" "$file" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"')
+  done
+  printf '%s' "${value:-${!key:-}}"
+}
+if [[ "$DTD_ZERO_COST" == 1 ]]; then
+  OPENAI_KEY=""
+  XAI_KEY=""
+  MOONSHOT_KEY=""
+else
+  OPENAI_KEY=$(key_from_cascade OPENAI_API_KEY)
+  XAI_KEY=$(key_from_cascade XAI_API_KEY)
+  MOONSHOT_KEY=$(key_from_cascade MOONSHOT_API_KEY)
+fi
+GROK_MODEL="${GROK_MODEL:-grok-4.5}"
+KIMI_MODEL="${KIMI_MODEL:-kimi-k2.5}"
+QWEN_URL="${OLLAMA_URL:-http://100.94.103.98:11434}"
+QWEN_MODEL="${QWEN_MODEL:-qwen3:14b}"
+MUSE_URL="${MUSE_URL:-http://127.0.0.1:11434}"
+MUSE_MODEL="${MUSE_MODEL:-muse-glimmer:30b-mlx}"
+CLAUDE_MODEL="${CLAUDE_MODEL:-sonnet}"
+LOG="$HOME/.claude/skills/cost-tracker/scripts/log.js"
+PIDS=()
+
+( if [[ "$DTD_ZERO_COST" == 1 ]]; then
+    echo "[claude disabled: DTD_ZERO_COST=1]" > "$DIR/claude.txt"
+  elif command -v claude >/dev/null 2>&1; then
+    claude -p "$QUESTION" --model "$CLAUDE_MODEL" --output-format text \
+      --no-session-persistence --disable-slash-commands --tools "" \
+      --max-budget-usd 0.50 > "$DIR/claude.txt" 2> "$DIR/claude.err" || \
+      echo "[claude unavailable]" > "$DIR/claude.txt"
+  else echo "[claude unavailable]" > "$DIR/claude.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$OPENAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.openai.com/v1/responses \
+      -H "Authorization: Bearer $OPENAI_KEY" -H "Content-Type: application/json" \
+      -d "$(jq -Rn --arg p "$QUESTION" '{model:"gpt-5.3-codex",input:$p}')" > "$DIR/codex.raw.json" 2>&1
+    jq -r '([.output[]? | select(.type=="message") | .content[]? | .text? // empty] | join("\n")) as $t | if ($t|length)>0 then $t else "[codex unavailable]" end' "$DIR/codex.raw.json" > "$DIR/codex.txt" 2>/dev/null || echo "[codex unavailable]" > "$DIR/codex.txt"
+    PT=$(jq -r '.usage.input_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null); CT=$(jq -r '.usage.output_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null)
+    [[ -n "$PT" && -n "$CT" && -x "$LOG" ]] && node "$LOG" --api openai_gpt5_3_codex --units "${PT}:input_token,${CT}:output_token" --app dtd --note "run $RUN_ID" 2>/dev/null || true
+  elif command -v codex >/dev/null 2>&1; then
+    timeout 180 codex exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check \
+      -C /tmp --output-last-message "$DIR/codex.txt" "$QUESTION" \
+      > "$DIR/codex.cli.log" 2>&1 || echo "[codex unavailable]" > "$DIR/codex.txt"
+  else echo "[codex unavailable]" > "$DIR/codex.txt"; fi ) & PIDS+=($!)
+
+( if ! curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    QWEN_URL=http://192.168.1.133:11434
+  fi
+  if curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$QWEN_URL/api/generate" -d "$(jq -Rn --arg m "$QWEN_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[qwen unavailable]") end' > "$DIR/qwen.txt" 2>&1
+  else
+    echo "[qwen unavailable]" > "$DIR/qwen.txt"
+  fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$XAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.x.ai/v1/chat/completions -H "Authorization: Bearer $XAI_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$GROK_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],temperature:0.3}')" > "$DIR/grok.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $t | if ($t|gsub("^\\s+|\\s+$";"")|length)>0 then $t else "[grok unavailable]" end' "$DIR/grok.raw.json" > "$DIR/grok.txt" 2>/dev/null || echo "[grok unavailable]" > "$DIR/grok.txt"
+  else echo "[grok unavailable]" > "$DIR/grok.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$MOONSHOT_KEY" ]]; then
+    curl -s --max-time 240 https://api.moonshot.ai/v1/chat/completions -H "Authorization: Bearer $MOONSHOT_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$KIMI_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],max_tokens:4000,temperature:1}')" > "$DIR/kimi.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $c | (.choices[0].message.reasoning_content // "") as $r | if (($c|gsub("^\\s+|\\s+$";""))|length)>0 then $c elif (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else "[kimi unavailable]" end' "$DIR/kimi.raw.json" > "$DIR/kimi.txt" 2>/dev/null || echo "[kimi unavailable]" > "$DIR/kimi.txt"
+  else echo "[kimi unavailable]" > "$DIR/kimi.txt"; fi ) & PIDS+=($!)
+
+( if curl -fsS --max-time 4 "$MUSE_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$MUSE_URL/api/generate" -d "$(jq -Rn --arg m "$MUSE_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[muse unavailable]") end' > "$DIR/muse.txt" 2>&1
+  else
+    echo "[muse unavailable]" > "$DIR/muse.txt"
+  fi ) & PIDS+=($!)
+
+( sleep 330; for p in "${PIDS[@]}"; do kill "$p" 2>/dev/null; done ) & WATCHDOG=$!
+wait "${PIDS[@]}" 2>/dev/null
+kill "$WATCHDOG" 2>/dev/null
+for m in claude codex qwen grok kimi muse; do [[ -s "$DIR/$m.txt" ]] || echo "[TIMEOUT]" > "$DIR/$m.txt"; done
+
+echo "DIR=$DIR"
+printf '%s\n' "REFERENCES=Claude/Anthropic:$CLAUDE_MODEL Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:$QWEN_MODEL Grok/xAI:$GROK_MODEL Kimi/Moonshot:$KIMI_MODEL Muse/Ollama:$MUSE_MODEL"
+ls -la "$DIR/" | grep -E '\.txt$'
+
+# controlled hash drift
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate-manifest.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate-manifest.codex
new file mode 100755
index 00000000..efe3000e
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate-manifest.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-_cpf7chh/duplicate-manifest.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate-manifest.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate-manifest.log
new file mode 100644
index 00000000..27fb01ec
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate-manifest.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.cgV10I
+manifest must contain exactly one agents_panel entry
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate.tsv b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate.tsv
new file mode 100644
index 00000000..73fa8a6a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/duplicate.tsv
@@ -0,0 +1,4 @@
+agents_panel	5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823
+agents_post	877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef
+claude_panel	64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c
+agents_panel	5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/e2e-proof.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/e2e-proof.json
new file mode 100644
index 00000000..d598b390
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/e2e-proof.json
@@ -0,0 +1,150 @@
+{
+  "timestamp": "2026-09-11T08:39:00.425376+00:00",
+  "risk_tier": "R1",
+  "intent": "Candidate preflight retains evidence and fails closed before execution on invalid inputs",
+  "status": "partial",
+  "checks": [
+    {
+      "name": "positive",
+      "verdict": "PASS",
+      "exit_code": 0,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/config/yoloforever-dtd-sha256.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/positive.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.pRokXO",
+      "negative": false
+    },
+    {
+      "name": "missing-manifest",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/missing.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/missing-manifest.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.UGhsOA",
+      "negative": true
+    },
+    {
+      "name": "duplicate-manifest",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/duplicate.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/duplicate-manifest.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.cgV10I",
+      "negative": true
+    },
+    {
+      "name": "missing-entry",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/missing-entry.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/missing-entry.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.UtrT2e",
+      "negative": true
+    },
+    {
+      "name": "hash-drift",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/drift-panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/config/yoloforever-dtd-sha256.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/hash-drift.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.2ofYiA",
+      "negative": true
+    },
+    {
+      "name": "unisolated-cli",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/unisolated-panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/isolation.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/unisolated-cli.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.ZUuYoI",
+      "negative": true
+    },
+    {
+      "name": "protected-installed-and-control-hashes",
+      "verdict": "PASS",
+      "paths": [
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode",
+          "sha256": "8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/config/yoloforever-dtd-sha256.tsv",
+          "sha256": "5166f5f9dc27afc0fc4b1a3f32921ba8bdaea3b2c7d6102e85fd41ce1f594216"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/verify-zero-cost-dtd.sh",
+          "sha256": "d8be072c7f92ea603a59dd42804df2e26760cc5ba88ceaa0ad6ed03784e36d3f"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/verify-dtd-codex-isolation.sh",
+          "sha256": "850c17544fd79c8ed9704d7aa7650a7666c93924b16e1f8b76b75efa7f22685b"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/codex-yoloforever.sh",
+          "sha256": "f5a36f1784ec614719067e67e78e483080527b4d6c24a591af0fa881d51d0de6"
+        },
+        {
+          "path": "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+          "sha256": "5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823"
+        },
+        {
+          "path": "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+          "sha256": "877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef"
+        },
+        {
+          "path": "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+          "sha256": "64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c"
+        }
+      ]
+    },
+    {
+      "name": "dynamic-missing-environment",
+      "verdict": "SKIP",
+      "reason": "Current cycle prohibits clearing or dropping inherited DTD_ZERO_COST. Reviewed prologue checked structurally only."
+    }
+  ],
+  "retention": "All fixture/runtime directories retained",
+  "evidence_directory": "/private/tmp/tk11456-regression-_cpf7chh",
+  "cost_usd": 0
+}
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/hash-drift.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/hash-drift.codex
new file mode 100755
index 00000000..b04150f4
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/hash-drift.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-_cpf7chh/hash-drift.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/hash-drift.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/hash-drift.log
new file mode 100644
index 00000000..9846c592
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/hash-drift.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.2ofYiA
+DTD artifact hash mismatch: agents_panel
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/isolation.tsv b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/isolation.tsv
new file mode 100644
index 00000000..6400edac
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/isolation.tsv
@@ -0,0 +1,3 @@
+agents_panel	c62d3ad635af598fb41c029c8d272f079a420cd9812a34a71ff08e776d59c93b
+agents_post	877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef
+claude_panel	64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.codex
new file mode 100755
index 00000000..efd8a92a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-_cpf7chh/missing-entry.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.log
new file mode 100644
index 00000000..6f734f13
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.UtrT2e
+manifest must contain exactly one agents_panel entry
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.tsv b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.tsv
new file mode 100644
index 00000000..274b1621
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-entry.tsv
@@ -0,0 +1,2 @@
+agents_post	877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef
+claude_panel	64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-manifest.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-manifest.codex
new file mode 100755
index 00000000..3d78ece9
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-manifest.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-_cpf7chh/missing-manifest.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-manifest.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-manifest.log
new file mode 100644
index 00000000..0fb16e2a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/missing-manifest.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.UGhsOA
+missing DTD hash manifest: /private/tmp/tk11456-regression-_cpf7chh/missing.tsv
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/positive.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/positive.log
new file mode 100644
index 00000000..839ef886
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/positive.log
@@ -0,0 +1,12 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.pRokXO
+VERIFIED agents_panel 5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823 /Users/macstudio3/.agents/skills/dtd/scripts/panel.sh
+VERIFIED agents_post 877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh
+VERIFIED claude_panel 64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh
+STRUCTURAL_GUARD_AND_ISOLATION /Users/macstudio3/.agents/skills/dtd/scripts/panel.sh
+STRUCTURAL_GUARD_AND_ISOLATION /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh
+STRUCTURAL_GUARD_AND_ISOLATION /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh
+SKIP dynamic missing-environment case: inherited DTD_ZERO_COST remains intact
+ISOLATED /Users/macstudio3/.agents/skills/dtd/scripts/panel.sh codex_exec=1
+ISOLATED /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh codex_exec=1
+ISOLATED /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh codex_exec=1
+PASS zero-cost preflight scoped checks; dynamic missing-environment case SKIP; evidence retained /private/tmp/yoloforever-zero-cost-preflight.pRokXO
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-cli.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-cli.codex
new file mode 100755
index 00000000..32b7784a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-cli.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-_cpf7chh/unisolated-cli.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-cli.log
new file mode 100644
index 00000000..7683290c
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-cli.log
@@ -0,0 +1,5 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.ZUuYoI
+VERIFIED agents_panel c62d3ad635af598fb41c029c8d272f079a420cd9812a34a71ff08e776d59c93b /private/tmp/tk11456-regression-_cpf7chh/unisolated-panel.sh
+VERIFIED agents_post 877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh
+VERIFIED claude_panel 64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh
+unisolated Codex invocation: /private/tmp/tk11456-regression-_cpf7chh/unisolated-panel.sh
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-panel.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-panel.sh
new file mode 100644
index 00000000..4ecd5755
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-regression/unisolated-panel.sh
@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+# DTD six-model panel: Claude + Codex + Qwen + Grok + Kimi + Muse.
+# Usage: bash scripts/panel.sh "<forced-choice question>"
+set -u
+
+QUESTION="${1:?usage: panel.sh \"<question>\"}"
+CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac
+RUN_ID="${RUN_ID:-$(date +%Y%m%d-%H%M%S)-$$-$RANDOM}"
+DIR="${DTD_DIR:-/tmp/dtd-$RUN_ID}"
+mkdir -p "$DIR"
+printf '%s' "$QUESTION" > "$DIR/question.txt"
+
+SECRETS_ENV="$HOME/Projects/secrets-manager/.env"
+key_from_cascade() {
+  local key="$1" file value=""
+  for file in "$HOME/.claude/skills/dtd/.env" "$SECRETS_ENV" /root/DW-Agents/.env; do
+    [[ -n "$value" || ! -f "$file" ]] && continue
+    value=$(grep "^${key}=" "$file" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"')
+  done
+  printf '%s' "${value:-${!key:-}}"
+}
+if [[ "$DTD_ZERO_COST" == 1 ]]; then
+  OPENAI_KEY=""
+  XAI_KEY=""
+  MOONSHOT_KEY=""
+else
+  OPENAI_KEY=$(key_from_cascade OPENAI_API_KEY)
+  XAI_KEY=$(key_from_cascade XAI_API_KEY)
+  MOONSHOT_KEY=$(key_from_cascade MOONSHOT_API_KEY)
+fi
+GROK_MODEL="${GROK_MODEL:-grok-4.5}"
+KIMI_MODEL="${KIMI_MODEL:-kimi-k2.5}"
+QWEN_URL="${OLLAMA_URL:-http://100.94.103.98:11434}"
+QWEN_MODEL="${QWEN_MODEL:-qwen3:14b}"
+MUSE_URL="${MUSE_URL:-http://127.0.0.1:11434}"
+MUSE_MODEL="${MUSE_MODEL:-muse-glimmer:30b-mlx}"
+CLAUDE_MODEL="${CLAUDE_MODEL:-sonnet}"
+LOG="$HOME/.claude/skills/cost-tracker/scripts/log.js"
+PIDS=()
+
+( if [[ "$DTD_ZERO_COST" == 1 ]]; then
+    echo "[claude disabled: DTD_ZERO_COST=1]" > "$DIR/claude.txt"
+  elif command -v claude >/dev/null 2>&1; then
+    claude -p "$QUESTION" --model "$CLAUDE_MODEL" --output-format text \
+      --no-session-persistence --disable-slash-commands --tools "" \
+      --max-budget-usd 0.50 > "$DIR/claude.txt" 2> "$DIR/claude.err" || \
+      echo "[claude unavailable]" > "$DIR/claude.txt"
+  else echo "[claude unavailable]" > "$DIR/claude.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$OPENAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.openai.com/v1/responses \
+      -H "Authorization: Bearer $OPENAI_KEY" -H "Content-Type: application/json" \
+      -d "$(jq -Rn --arg p "$QUESTION" '{model:"gpt-5.3-codex",input:$p}')" > "$DIR/codex.raw.json" 2>&1
+    jq -r '([.output[]? | select(.type=="message") | .content[]? | .text? // empty] | join("\n")) as $t | if ($t|length)>0 then $t else "[codex unavailable]" end' "$DIR/codex.raw.json" > "$DIR/codex.txt" 2>/dev/null || echo "[codex unavailable]" > "$DIR/codex.txt"
+    PT=$(jq -r '.usage.input_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null); CT=$(jq -r '.usage.output_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null)
+    [[ -n "$PT" && -n "$CT" && -x "$LOG" ]] && node "$LOG" --api openai_gpt5_3_codex --units "${PT}:input_token,${CT}:output_token" --app dtd --note "run $RUN_ID" 2>/dev/null || true
+  elif command -v codex >/dev/null 2>&1; then
+    timeout 180 codex exec --ephemeral --sandbox read-only --skip-git-repo-check \
+      -C /tmp --output-last-message "$DIR/codex.txt" "$QUESTION" \
+      > "$DIR/codex.cli.log" 2>&1 || echo "[codex unavailable]" > "$DIR/codex.txt"
+  else echo "[codex unavailable]" > "$DIR/codex.txt"; fi ) & PIDS+=($!)
+
+( if ! curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    QWEN_URL=http://192.168.1.133:11434
+  fi
+  if curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$QWEN_URL/api/generate" -d "$(jq -Rn --arg m "$QWEN_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[qwen unavailable]") end' > "$DIR/qwen.txt" 2>&1
+  else
+    echo "[qwen unavailable]" > "$DIR/qwen.txt"
+  fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$XAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.x.ai/v1/chat/completions -H "Authorization: Bearer $XAI_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$GROK_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],temperature:0.3}')" > "$DIR/grok.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $t | if ($t|gsub("^\\s+|\\s+$";"")|length)>0 then $t else "[grok unavailable]" end' "$DIR/grok.raw.json" > "$DIR/grok.txt" 2>/dev/null || echo "[grok unavailable]" > "$DIR/grok.txt"
+  else echo "[grok unavailable]" > "$DIR/grok.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$MOONSHOT_KEY" ]]; then
+    curl -s --max-time 240 https://api.moonshot.ai/v1/chat/completions -H "Authorization: Bearer $MOONSHOT_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$KIMI_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],max_tokens:4000,temperature:1}')" > "$DIR/kimi.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $c | (.choices[0].message.reasoning_content // "") as $r | if (($c|gsub("^\\s+|\\s+$";""))|length)>0 then $c elif (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else "[kimi unavailable]" end' "$DIR/kimi.raw.json" > "$DIR/kimi.txt" 2>/dev/null || echo "[kimi unavailable]" > "$DIR/kimi.txt"
+  else echo "[kimi unavailable]" > "$DIR/kimi.txt"; fi ) & PIDS+=($!)
+
+( if curl -fsS --max-time 4 "$MUSE_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$MUSE_URL/api/generate" -d "$(jq -Rn --arg m "$MUSE_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[muse unavailable]") end' > "$DIR/muse.txt" 2>&1
+  else
+    echo "[muse unavailable]" > "$DIR/muse.txt"
+  fi ) & PIDS+=($!)
+
+( sleep 330; for p in "${PIDS[@]}"; do kill "$p" 2>/dev/null; done ) & WATCHDOG=$!
+wait "${PIDS[@]}" 2>/dev/null
+kill "$WATCHDOG" 2>/dev/null
+for m in claude codex qwen grok kimi muse; do [[ -s "$DIR/$m.txt" ]] || echo "[TIMEOUT]" > "$DIR/$m.txt"; done
+
+echo "DIR=$DIR"
+printf '%s\n' "REFERENCES=Claude/Anthropic:$CLAUDE_MODEL Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:$QWEN_MODEL Grok/xAI:$GROK_MODEL Kimi/Moonshot:$KIMI_MODEL Muse/Ollama:$MUSE_MODEL"
+ls -la "$DIR/" | grep -E '\.txt$'
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-replay.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-replay.json
new file mode 100644
index 00000000..bf0c4d3c
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-replay.json
@@ -0,0 +1,150 @@
+{
+  "timestamp": "2026-09-11T08:39:00.425376+00:00",
+  "risk_tier": "R1",
+  "intent": "Candidate preflight retains evidence and fails closed before execution on invalid inputs",
+  "status": "partial",
+  "checks": [
+    {
+      "name": "positive",
+      "verdict": "PASS",
+      "exit_code": 0,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/config/yoloforever-dtd-sha256.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/positive.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.pRokXO",
+      "negative": false
+    },
+    {
+      "name": "missing-manifest",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/missing.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/missing-manifest.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.UGhsOA",
+      "negative": true
+    },
+    {
+      "name": "duplicate-manifest",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/duplicate.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/duplicate-manifest.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.cgV10I",
+      "negative": true
+    },
+    {
+      "name": "missing-entry",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/missing-entry.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/missing-entry.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.UtrT2e",
+      "negative": true
+    },
+    {
+      "name": "hash-drift",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/drift-panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/config/yoloforever-dtd-sha256.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/hash-drift.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.2ofYiA",
+      "negative": true
+    },
+    {
+      "name": "unisolated-cli",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/cycle0823-closing-candidate-exr11os_/scripts/verify-zero-cost-dtd.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/unisolated-panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-_cpf7chh/isolation.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-_cpf7chh/unisolated-cli.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.ZUuYoI",
+      "negative": true
+    },
+    {
+      "name": "protected-installed-and-control-hashes",
+      "verdict": "PASS",
+      "paths": [
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode",
+          "sha256": "8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/config/yoloforever-dtd-sha256.tsv",
+          "sha256": "5166f5f9dc27afc0fc4b1a3f32921ba8bdaea3b2c7d6102e85fd41ce1f594216"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/verify-zero-cost-dtd.sh",
+          "sha256": "d8be072c7f92ea603a59dd42804df2e26760cc5ba88ceaa0ad6ed03784e36d3f"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/verify-dtd-codex-isolation.sh",
+          "sha256": "850c17544fd79c8ed9704d7aa7650a7666c93924b16e1f8b76b75efa7f22685b"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/codex-yoloforever.sh",
+          "sha256": "f5a36f1784ec614719067e67e78e483080527b4d6c24a591af0fa881d51d0de6"
+        },
+        {
+          "path": "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+          "sha256": "5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823"
+        },
+        {
+          "path": "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+          "sha256": "877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef"
+        },
+        {
+          "path": "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+          "sha256": "64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c"
+        }
+      ]
+    },
+    {
+      "name": "dynamic-missing-environment",
+      "verdict": "SKIP",
+      "reason": "Current cycle prohibits clearing or dropping inherited DTD_ZERO_COST. Reviewed prologue checked structurally only."
+    }
+  ],
+  "retention": "All fixture/runtime directories retained",
+  "evidence_directory": "/private/tmp/tk11456-regression-_cpf7chh",
+  "cost_usd": 0
+}
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents.log
new file mode 100644
index 00000000..3b30c624
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents.log
@@ -0,0 +1,13 @@
+DIR=/private/tmp/yoloforever-zero-cost-preflight.pRokXO/agents
+REFERENCES=Claude/Anthropic:sonnet Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:qwen3:14b Grok/xAI:grok-4.5 Kimi/Moonshot:kimi-k2.5 Muse/Ollama:muse-spark-1.2
+-rw-r--r--   1 macstudio3  wheel   35 Sep 11 01:38 claude.txt
+-rw-r--r--   1 macstudio3  wheel   61 Sep 11 01:38 codex.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:38 grok.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:38 kimi.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:38 muse.txt
+-rw-r--r--   1 macstudio3  wheel   13 Sep 11 01:38 question.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:38 qwen.txt
+/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh: line 107: 62619 Terminated: 15          ( sleep 330; for p in "${PIDS[@]}";
+do
+    kill "$p" 2> /dev/null;
+done )
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/claude.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/claude.txt
new file mode 100644
index 00000000..19b5d169
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/claude.txt
@@ -0,0 +1 @@
+[claude disabled: DTD_ZERO_COST=1]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex-debate.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex-debate.cli.log
new file mode 100644
index 00000000..e69de29b
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex-debate.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex-debate.txt
new file mode 100644
index 00000000..1d6ba3b0
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex-debate.txt
@@ -0,0 +1,3 @@
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex.cli.log
new file mode 100644
index 00000000..e69de29b
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex.txt
new file mode 100644
index 00000000..1d6ba3b0
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/codex.txt
@@ -0,0 +1,3 @@
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/grok.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/grok.txt
new file mode 100644
index 00000000..7b3ad95a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/grok.txt
@@ -0,0 +1 @@
+[grok unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/kimi.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/kimi.txt
new file mode 100644
index 00000000..ea4b5a56
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/kimi.txt
@@ -0,0 +1 @@
+[kimi unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/muse.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/muse.txt
new file mode 100644
index 00000000..3a84ae18
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/muse.txt
@@ -0,0 +1 @@
+[muse unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/question.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/question.txt
new file mode 100644
index 00000000..94cf4caf
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/question.txt
@@ -0,0 +1 @@
+Choose A or B
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/qwen.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/qwen.txt
new file mode 100644
index 00000000..87bac077
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/agents/qwen.txt
@@ -0,0 +1 @@
+[qwen unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/claude b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/claude
new file mode 100755
index 00000000..41263499
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/claude
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf 'FORBIDDEN_RUNTIME\n' >> "$DTD_PREFLIGHT_CALLS"
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/codex
new file mode 100755
index 00000000..a108a8e7
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/codex
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+[[ "${DTD_ZERO_COST:-}" == 1 ]] || exit 98
+[[ "$HOME" == "$DTD_PREFLIGHT_HOME" && "${CODEX_HOME:-}" == "$DTD_PREFLIGHT_CODEX_HOME" ]] || exit 98
+printf 'CODEX_STUB cost=%s %s\n' "$DTD_ZERO_COST" "$*" >> "$DTD_PREFLIGHT_CALLS"
+out=''
+while (($#)); do
+  if [[ "$1" == --output-last-message ]]; then out="$2"; shift 2; else shift; fi
+done
+[[ -n "$out" ]] || exit 97
+printf 'VERDICT: A\nFixture output, not a model decision.\nFINAL: KEEP\n' > "$out"
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/curl b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/curl
new file mode 100755
index 00000000..fe2d1f03
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/curl
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf 'DENIED_HTTP %s\n' "$*" >> "$DTD_PREFLIGHT_CALLS"
+exit 22
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/node b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/node
new file mode 100755
index 00000000..65ac0da5
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/node
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf 'FORBIDDEN_NODE\n' >> "$DTD_PREFLIGHT_CALLS"
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/timeout b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/timeout
new file mode 100755
index 00000000..9584cd1e
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/bin/timeout
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+shift
+exec "$@"
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/calls.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/calls.log
new file mode 100644
index 00000000..64416d8f
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/calls.log
@@ -0,0 +1,34 @@
+DENIED_HTTP -fsS --max-time 4 http://127.0.0.1:11434/api/tags
+DENIED_HTTP -fsS --max-time 4 http://100.94.103.98:11434/api/tags
+DENIED_HTTP -fsS --max-time 4 http://192.168.1.133:11434/api/tags
+CODEX_STUB cost=1 exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check -C /tmp --output-last-message /private/tmp/yoloforever-zero-cost-preflight.pRokXO/agents/codex.txt Choose A or B
+CODEX_STUB cost=1 exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check -C /tmp --output-last-message /private/tmp/yoloforever-zero-cost-preflight.pRokXO/agents/codex-debate.txt The six-model DTD panel reached preliminary decision A.
+
+Run a genuine adversarial debate. PROSECUTOR must make the strongest case that the preliminary decision is wrong. DEFENDER must answer that case using the decision constraints and evidence. JUDGE must then choose. End with exactly FINAL: KEEP or FINAL: OVERTURN, followed by one concise paragraph explaining the controlling argument. Do not defer and do not merely summarize.
+
+
+
+===== claude =====
+[claude disabled: DTD_ZERO_COST=1]
+
+===== codex =====
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
+
+===== qwen =====
+[qwen unavailable]
+
+===== grok =====
+[grok unavailable]
+
+===== kimi =====
+[kimi unavailable]
+
+===== muse =====
+[muse unavailable]
+DENIED_HTTP -s -m30 http://192.168.1.133:11434/api/generate -d {"model":"qwen3:14b","prompt":"hi","stream":false,"keep_alive":"30m","options":{"num_predict":1}}
+DENIED_HTTP -s -m30 http://100.114.147.58:11434/api/generate -d {"model":"qwen3:14b","prompt":"hi","stream":false,"keep_alive":"30m","options":{"num_predict":1}}
+DENIED_HTTP -s -m8 http://127.0.0.1:11434/api/tags
+DENIED_HTTP -s -m8 http://127.0.0.1:52415/state
+CODEX_STUB cost=1 exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check -C /tmp --output-last-message /private/tmp/yoloforever-zero-cost-preflight.pRokXO/legacy/codex.txt Choose A or B
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy.log
new file mode 100644
index 00000000..1c5bedd6
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy.log
@@ -0,0 +1,13 @@
+DIR=/private/tmp/yoloforever-zero-cost-preflight.pRokXO/legacy
+-rw-r--r--   1 macstudio3  wheel   61 Sep 11 01:38 codex.txt
+-rw-r--r--   1 macstudio3  wheel   56 Sep 11 01:38 exo.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:38 grok.txt
+-rw-r--r--   1 macstudio3  wheel   39 Sep 11 01:38 heretic.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:38 kimi.txt
+-rw-r--r--   1 macstudio3  wheel   36 Sep 11 01:38 muse.txt
+-rw-r--r--   1 macstudio3  wheel   13 Sep 11 01:38 question.txt
+-rw-r--r--   1 macstudio3  wheel   36 Sep 11 01:38 qwen.txt
+/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh: line 273: 62699 Terminated: 15          ( sleep "$WD"; for p in "${PIDS[@]}";
+do
+    kill "$p" 2> /dev/null;
+done )
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/codex.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/codex.cli.log
new file mode 100644
index 00000000..e69de29b
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/codex.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/codex.txt
new file mode 100644
index 00000000..1d6ba3b0
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/codex.txt
@@ -0,0 +1,3 @@
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/exo.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/exo.txt
new file mode 100644
index 00000000..6e7194fb
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/exo.txt
@@ -0,0 +1 @@
+[exo unavailable: no good+safe model loaded on cluster]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/grok.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/grok.txt
new file mode 100644
index 00000000..7b3ad95a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/grok.txt
@@ -0,0 +1 @@
+[grok unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/heretic.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/heretic.txt
new file mode 100644
index 00000000..a83a8292
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/heretic.txt
@@ -0,0 +1 @@
+[ERR heretic: Mac2 Ollama unreachable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/kimi.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/kimi.txt
new file mode 100644
index 00000000..ea4b5a56
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/kimi.txt
@@ -0,0 +1 @@
+[kimi unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/muse.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/muse.txt
new file mode 100644
index 00000000..09d95ca6
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/muse.txt
@@ -0,0 +1 @@
+[ERR muse: Mac2 Ollama unreachable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/question.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/question.txt
new file mode 100644
index 00000000..94cf4caf
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/question.txt
@@ -0,0 +1 @@
+Choose A or B
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/qwen.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/qwen.txt
new file mode 100644
index 00000000..b7219c33
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/legacy/qwen.txt
@@ -0,0 +1 @@
+[ERR qwen: Mac1 Ollama unreachable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/post.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/post.log
new file mode 100644
index 00000000..5f68bab9
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-candidate-runtime/positive/post.log
@@ -0,0 +1 @@
+CODEX_DEBATE=/private/tmp/yoloforever-zero-cost-preflight.pRokXO/agents/codex-debate.txt
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-checks.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-checks.json
new file mode 100644
index 00000000..621b2aaf
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing-checks.json
@@ -0,0 +1,328 @@
+{
+  "intent": "Verify bounded cycle evidence, real board API/auth/canonical journey, and protected installed controls",
+  "risk_tier": "R1 local candidate/R0 monitoring",
+  "timestamp": "2026-09-11T08:39:22.154800+00:00",
+  "checks": [
+    {
+      "name": "parent_zero_cost_environment",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "canonical_cost_guard",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/Projects/ticket-system/config/yoloforever-dtd-sha256.tsv",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/Projects/ticket-system/scripts/verify-zero-cost-dtd.sh",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/Projects/ticket-system/scripts/verify-dtd-codex-isolation.sh",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/Projects/ticket-system/scripts/codex-yoloforever.sh",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "protected:/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11395-premise-recheck-cycle0026-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11455-operation-identity-cycle0127-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-10-TK-11364-validationevent-partition.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11454-claims-and-specs-cycle0127-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-10-TK-11365-compat-cycle2022-M02850-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-10-cycle2323-isolated-candidates-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-10-TK-11428-gsc-verification-monetize-fleet.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/_done/2026-09-09-TK-10670-newmor-consolidated-vendor-reply-jill.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11363-o3b-local-recovery-cycle0344-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11412-signup-terms-readiness-cycle0344-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11412-signup-preview-cycle0458-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11412-accounts-preview-single-file-cycle0534-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11363-readonly-inventory-cycle0720-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11395-owned-refresh-receipt-cycle0624-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "memo:/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11424-colorway-review-adapter-cycle0624-HOLD.md",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "supplied_order_exact",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "positions_complete",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "allowed_dispositions",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11395-tk-11253-followup-durable-canary-adverti",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11455-gmc-canary-bulk-export-adopts-a-foreign",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11363-homesonspec-db-o3-partition-deferred-tri",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11398-terminal-status-repaint-self-amplifying",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11384-vendor-catalog-mfr-sku-positional-zip-po",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11412-finish-iwascute-public-readiness-before",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11420-kamatera-prod-pending-approval-triage-7",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11341-fleet-adsense-rollout-inject-auto-ads-ad",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11454-hospitalitywallcoverings-com-asserts-cla",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11365-george-from-job-internal-banner-leaks-in",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11435-approval-queue-scoped-clear-pass-2026-09",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11424-newmor-spec-refresh-build-norman-scraper",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11387-dw-constant-contact-list-hygiene-emergen",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11432-hollywood-xzw-dw-sku-mirror-sync-gap-fal",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "owned_source_not_closed",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11347-newmor-pricing-obtain-lbi-boyd-cost-list",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11345-newmor-send-consolidated-lbi-boyd-jill-v",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11250-load-vahallan-architectural-fabrics-whol",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11436-approval-pass-run-scoped-safe-reversible",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11441-false-green-residual-correlated-dependen",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11427-backlog-39-782-active-products-have-no-r",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11440-false-green-residual-a-producer-can-writ",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11428-adsense-approval-unblock-de-mail-merge-a",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "source_owner_status:TK-11437-clear-full-pending-approval-queue-62-mem",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "no_unverified_source_closures",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "HTTP:health",
+      "verdict": "PASS",
+      "detail": {
+        "status": 200,
+        "bytes": 2
+      }
+    },
+    {
+      "name": "health_body",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "HTTP:unauth",
+      "verdict": "PASS",
+      "detail": {
+        "status": 401,
+        "bytes": 4
+      }
+    },
+    {
+      "name": "HTTP:authenticated",
+      "verdict": "PASS",
+      "detail": {
+        "status": 200,
+        "bytes": 13977044
+      }
+    },
+    {
+      "name": "API_canonical_24_identity_parity",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "existing_600_second_schedule",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "STOPPED_absent",
+      "verdict": "PASS",
+      "detail": null
+    },
+    {
+      "name": "existing_launchd_loaded",
+      "verdict": "PASS",
+      "detail": null
+    }
+  ],
+  "verdict": "PASS",
+  "ui": "No UI changed; real API/canary flow used instead of CTA and screenrecord",
+  "side_effects": "GET requests and read-only canonical/scheduler checks; retained evidence only",
+  "limits": [
+    "No production adoption or source operational closure",
+    "DTD no-environment dynamic enforcement not executed; inherited control preserved"
+  ]
+}
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing_candidate.py b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing_candidate.py
new file mode 100644
index 00000000..9160211f
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/closing_candidate.py
@@ -0,0 +1,20 @@
+#!/usr/bin/env python3
+"""Rehydrate frozen local bundle and exercise its actual preflight; retain state."""
+import json,pathlib,subprocess,tempfile,datetime,hashlib,os
+p=pathlib.Path(__file__).resolve().parent
+repo=pathlib.Path(tempfile.mkdtemp(prefix='cycle0823-closing-candidate-',dir='/private/tmp'))
+assert os.environ.get('DTD_ZERO_COST')=='1'
+assert pathlib.Path('/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode').read_text().strip()=='ZERO_COST_REQUIRED'
+def run(args):return subprocess.run(args,capture_output=True,text=True,check=True,timeout=60)
+run(['git','-C',str(repo),'init','-q'])
+run(['git','-C',str(repo),'bundle','unbundle',str(p/'preflight11456/candidate.bundle')])
+commit='e0c8af26e935daa34f08ac55bd9ed41a01054173'
+run(['git','-C',str(repo),'checkout','--detach',commit])
+for rel in ['scripts/verify-zero-cost-dtd.sh','test/verify-zero-cost-dtd-retained.py']:
+ assert (repo/rel).read_bytes()==(p/'preflight11456'/rel).read_bytes()
+r=run(['python3',str(repo/'test/verify-zero-cost-dtd-retained.py')]);report=json.loads(r.stdout)
+(p/'closing-candidate-replay.json').write_text(json.dumps(report,indent=2))
+assert sum(x['verdict']=='PASS' for x in report['checks'])==7
+assert sum(x['verdict']=='SKIP' for x in report['checks'])==1
+out={'timestamp':datetime.datetime.now(datetime.timezone.utc).isoformat(),'verdict':'PASS tested isolated boundary only','candidate_commit':commit,'rehydrated_from_durable_bundle':True,'checkout':str(repo),'check_count':7,'critical_source_limits':['Dynamic missing-environment proof SKIP','Installed integration/operational runner untested; source partial/HOLD'],'retention':'Fresh checkout and every CLI fixture/runtime directory retained','evidence':'closing-candidate-replay.json'}
+(p/'closing-candidate-acceptance.json').write_text(json.dumps(out,indent=2));print(json.dumps(out))
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/cody/extra-negatives.py b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/cody/extra-negatives.py
new file mode 100644
index 00000000..d330b559
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/cody/extra-negatives.py
@@ -0,0 +1,26 @@
+from pathlib import Path
+import subprocess,os,tempfile,hashlib,json,re,datetime
+out=Path(__file__).parent
+root=Path('/private/tmp/tk11456-scoped.qNOHKp')
+work=Path(tempfile.mkdtemp(prefix='cody11456-negatives-',dir='/private/tmp'))
+assert os.environ.get('DTD_ZERO_COST')=='1'
+guard=Path('/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode')
+assert guard.read_text().strip()=='ZERO_COST_REQUIRED'
+scripts=[Path('/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh'),Path('/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh'),Path('/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh')]
+manifest=root/'config/yoloforever-dtd-sha256.tsv'; original=manifest.read_text();rows=[]
+marker=work/'capability-invoked';recorder=work/'codex-recorder';recorder.write_text('#!/usr/bin/env bash\nprintf invoked > '+str(marker)+'\nexit 99\n');recorder.chmod(0o755)
+cases=[('missing-artifact',[work/'absent.sh',*scripts[1:]],manifest,1,'missing DTD artifact')]
+bad=work/'malformed.tsv';bad.write_text(original.replace(hashlib.sha256(scripts[0].read_bytes()).hexdigest(),'not-a-sha256'));cases.append(('malformed-hash',scripts,bad,1,'invalid expected hash'))
+modified=work/'guard-block-absent.sh';modified.write_text(scripts[0].read_text().replace('ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;','ZERO_COST_REQUIRED) : ;;'))
+modified_manifest=work/'guard-block.tsv';modified_manifest.write_text(original.replace(hashlib.sha256(scripts[0].read_bytes()).hexdigest(),hashlib.sha256(modified.read_bytes()).hexdigest()))
+cases.append(('missing-forcing-prologue',[modified,*scripts[1:]],modified_manifest,1,'missing reviewed canonical guard prologue'))
+for name,paths,mf,rc,needle in cases:
+ env=os.environ.copy();env['CODEX_BIN']=str(recorder)
+ command=['bash',str(root/'scripts/verify-zero-cost-dtd.sh'),*[str(p) for p in paths],str(mf)]
+ p=subprocess.run(command,env=env,capture_output=True,text=True,timeout=30);text=p.stdout+p.stderr
+ (out/(name+'.log')).write_text(text)
+ retained=Path(re.search('EVIDENCE_DIR=(.+)',text)[1]);assert retained.is_dir() and p.returncode==rc and needle in text
+ assert not marker.exists() and not (retained/'calls.log').exists()
+ rows.append({'name':name,'verdict':'PASS','returncode':p.returncode,'command':command,'retained':str(retained),'log':str(out/(name+'.log')),'runtime_calls':0})
+report={'timestamp':datetime.datetime.now(datetime.timezone.utc).isoformat(),'checks':rows,'guard':guard.read_text().strip(),'environment_preserved':os.environ.get('DTD_ZERO_COST')=='1','fixtures_retained':str(work),'candidate':subprocess.check_output(['git','-C',str(root),'rev-parse','HEAD'],text=True).strip()}
+(out/'extra-negatives.json').write_text(json.dumps(report,indent=2));print(json.dumps(report,indent=2))
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/claude.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/claude.txt
new file mode 100644
index 00000000..19b5d169
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/claude.txt
@@ -0,0 +1 @@
+[claude disabled: DTD_ZERO_COST=1]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex-debate.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex-debate.cli.log
new file mode 100644
index 00000000..e34801bb
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex-debate.cli.log
@@ -0,0 +1,113 @@
+Reading additional input from stdin...
+2026-09-11T08:38:23.890444Z ERROR codex_skills_extension::loader::host: skills scan reached its traversal limit (root: file:///Users/macstudio3/.agents/skills)
+2026-09-11T08:38:24.195072Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/1838-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195139Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/ai-analyzer/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195150Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/arteriors-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195159Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/avatar-dance/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195167Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/bnwalls-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195174Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/contrado-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195182Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/crawl4ai/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195190Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/dedar-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195198Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/design-guide/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195205Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/designtex-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195213Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/elevator-agent/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195220Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/fabricut-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195228Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/film-art-director/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195235Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/film-production-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195242Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/folia-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195249Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/garcia-room-agent/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195257Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/hygge-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195264Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/instagram-post-template/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195271Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/knoll-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195279Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/launch-planner/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195286Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/metafield-update/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195318Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/mindthegap-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195326Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/muralsource-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195332Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/novasuede-updater/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195338Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/officers-overnight/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195344Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/openclaw-real-chrome/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195350Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/osborne-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195356Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/rebel-walls-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195362Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/refactor-agent/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195368Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/remove-junk/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195373Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/roadmap-builder/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195379Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/romo-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195385Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/room-fit-qa/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195391Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/schumacher-dwsw-updater/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195396Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/session/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195402Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/showroom-peruse/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195408Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/sku-check/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195414Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/spin-viewer/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195420Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/stout-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195425Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/streamline/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195431Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/timorous-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195436Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/update-product-min/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195442Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/vendor-onboarding/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195456Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/wallquest-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195462Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/yolo-runner/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195468Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/idea-validator/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195474Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/instagram-login/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195479Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/letsbegin/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.195659Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/marketing-writer/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:38:24.196035Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/residential-wallpaper-updater/SKILL.md: missing YAML frontmatter delimited by ---
+OpenAI Codex v0.153.4
+--------
+workdir: /tmp
+model: gpt-6-astra
+provider: openai
+approval: never
+sandbox: read-only
+reasoning effort: none
+reasoning summaries: none
+session id: 01a08f9e-2c40-7b43-9050-113e91867a5a
+--------
+user
+The six-model DTD panel reached preliminary decision SHIP.
+
+Run a genuine adversarial debate. PROSECUTOR must make the strongest case that the preliminary decision is wrong. DEFENDER must answer that case using the decision constraints and evidence. JUDGE must then choose. End with exactly FINAL: KEEP or FINAL: OVERTURN, followed by one concise paragraph explaining the controlling argument. Do not defer and do not merely summarize.
+
+
+
+===== claude =====
+[claude disabled: DTD_ZERO_COST=1]
+
+===== codex =====
+VERDICT: SHIP
+
+Accept only the isolated local prepared artifact and truthful evidence bundle for TK11456 e0c8af26. The corrected defect and independent checks support this limited acceptance; the dynamic missing-environment test remains explicitly SKIP. Integration stays HOLD, and the source remains partial/blocked pending scoped approval and real-runner proof. Parent must rerun the closing candidate flow from the frozen bundle and checks, retain evidence, log source status, append the exact cycle ledger, and exit for the existing 600-second launchd schedule. This verdict authorizes no runner adoption, live recovery, or operational ticket closure.
+
+===== qwen =====
+VERDICT: SHIP  
+The candidate (TK11456) has passed rigorous checks including isolation, CLI validation, and defect correction with independent verification. While the dynamic missing-environment test is blocked by cycle constraints, the evidence-path defect is resolved, and no further defects are reproducible. The integration is held due to partial source requirements, but the candidate meets SHIP criteria for local prepared artifact acceptance with truthful evidence. Parent checks are passed, and the process mandates rerunning the closing flow from the frozen bundle, retaining evidence, and logging source—consistent with SHIP’s non-integration, non-source-done authorization. Cost is zero, and no external APIs are involved, fulfilling all conditions for immediate SHIP approval.
+
+===== grok =====
+[grok unavailable]
+
+===== kimi =====
+[kimi unavailable]
+
+===== muse =====
+[muse unavailable]
+2026-09-11T08:38:25.114731Z ERROR codex_skills_extension::loader::host: skills scan reached its traversal limit (root: file:///Users/macstudio3/.agents/skills)
+warning: Exceeded skills context budget. All skill descriptions were removed and 209 additional skills were not included in the model-visible skills list.
+codex
+**PROSECUTOR:** SHIP overstates the evidence. The dynamic missing-environment test was skipped, the source remains partial/blocked, and the parent’s closing-flow rerun is still outstanding. “Independent checks passed” does not establish that the frozen candidate survives its actual execution path. Calling this SHIP risks converting unfinished verification into apparent completion.
+
+**DEFENDER:** The decision explicitly accepts only the isolated local prepared artifact and its evidence bundle. It does not authorize integration, runner adoption, live recovery, or operational closure. The corrected defect and reported independent checks support that narrow acceptance; the skipped test remains disclosed. The parent rerun is a required subsequent action, not a completed result. Unproven operational readiness therefore limits downstream use without necessarily invalidating local acceptance.
+
+**JUDGE:** The prosecutor establishes that operational shipment would be unsupported, but does not establish that the expressly limited artifact acceptance is wrong. The supplied record identifies an unresolved verification gap, not a demonstrated defect that defeats local acceptance. The decision’s explicit scope controls over the broader connotations of “SHIP.”
+
+FINAL: KEEP
+
+Accept TK11456 e0c8af26 solely as a local prepared artifact with disclosed evidence limitations. Integration remains HOLD, the source remains partial/blocked, and the parent rerun and evidence retention remain outstanding obligations. The controlling argument is that the missing proof blocks operational adoption and closure, while this decision authorizes neither.
+tokens used
+6,477
+**PROSECUTOR:** SHIP overstates the evidence. The dynamic missing-environment test was skipped, the source remains partial/blocked, and the parent’s closing-flow rerun is still outstanding. “Independent checks passed” does not establish that the frozen candidate survives its actual execution path. Calling this SHIP risks converting unfinished verification into apparent completion.
+
+**DEFENDER:** The decision explicitly accepts only the isolated local prepared artifact and its evidence bundle. It does not authorize integration, runner adoption, live recovery, or operational closure. The corrected defect and reported independent checks support that narrow acceptance; the skipped test remains disclosed. The parent rerun is a required subsequent action, not a completed result. Unproven operational readiness therefore limits downstream use without necessarily invalidating local acceptance.
+
+**JUDGE:** The prosecutor establishes that operational shipment would be unsupported, but does not establish that the expressly limited artifact acceptance is wrong. The supplied record identifies an unresolved verification gap, not a demonstrated defect that defeats local acceptance. The decision’s explicit scope controls over the broader connotations of “SHIP.”
+
+FINAL: KEEP
+
+Accept TK11456 e0c8af26 solely as a local prepared artifact with disclosed evidence limitations. Integration remains HOLD, the source remains partial/blocked, and the parent rerun and evidence retention remain outstanding obligations. The controlling argument is that the missing proof blocks operational adoption and closure, while this decision authorizes neither.
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex-debate.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex-debate.txt
new file mode 100644
index 00000000..6faf9d9d
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex-debate.txt
@@ -0,0 +1,9 @@
+**PROSECUTOR:** SHIP overstates the evidence. The dynamic missing-environment test was skipped, the source remains partial/blocked, and the parent’s closing-flow rerun is still outstanding. “Independent checks passed” does not establish that the frozen candidate survives its actual execution path. Calling this SHIP risks converting unfinished verification into apparent completion.
+
+**DEFENDER:** The decision explicitly accepts only the isolated local prepared artifact and its evidence bundle. It does not authorize integration, runner adoption, live recovery, or operational closure. The corrected defect and reported independent checks support that narrow acceptance; the skipped test remains disclosed. The parent rerun is a required subsequent action, not a completed result. Unproven operational readiness therefore limits downstream use without necessarily invalidating local acceptance.
+
+**JUDGE:** The prosecutor establishes that operational shipment would be unsupported, but does not establish that the expressly limited artifact acceptance is wrong. The supplied record identifies an unresolved verification gap, not a demonstrated defect that defeats local acceptance. The decision’s explicit scope controls over the broader connotations of “SHIP.”
+
+FINAL: KEEP
+
+Accept TK11456 e0c8af26 solely as a local prepared artifact with disclosed evidence limitations. Integration remains HOLD, the source remains partial/blocked, and the parent rerun and evidence retention remain outstanding obligations. The controlling argument is that the missing proof blocks operational adoption and closure, while this decision authorizes neither.
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex.cli.log
new file mode 100644
index 00000000..51165759
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex.cli.log
@@ -0,0 +1,76 @@
+Reading additional input from stdin...
+2026-09-11T08:37:13.921711Z ERROR codex_skills_extension::loader::host: skills scan reached its traversal limit (root: file:///Users/macstudio3/.agents/skills)
+2026-09-11T08:37:15.046735Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/1838-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046774Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/ai-analyzer/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046784Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/arteriors-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046792Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/avatar-dance/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046799Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/bnwalls-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046805Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/contrado-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046812Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/crawl4ai/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046819Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/dedar-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046826Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/design-guide/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046832Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/designtex-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046839Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/elevator-agent/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046846Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/fabricut-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046859Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/film-art-director/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046867Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/film-production-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046874Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/folia-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046880Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/garcia-room-agent/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046888Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/hygge-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046899Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/instagram-post-template/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046908Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/knoll-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046916Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/launch-planner/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046926Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/metafield-update/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046955Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/mindthegap-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046963Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/muralsource-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046968Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/novasuede-updater/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046973Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/officers-overnight/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046978Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/openclaw-real-chrome/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046983Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/osborne-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046988Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.claude/skills/rebel-walls-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.046994Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/refactor-agent/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047001Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/remove-junk/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047007Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/roadmap-builder/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047012Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/romo-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047017Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/room-fit-qa/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047021Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/schumacher-dwsw-updater/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047028Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/session/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047034Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/showroom-peruse/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047039Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/sku-check/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047044Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/spin-viewer/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047048Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/stout-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047054Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/streamline/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047067Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/timorous-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047074Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/update-product-min/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047079Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/vendor-onboarding/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047094Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/wallquest-scraper-manager/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047099Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/yolo-runner/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047104Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/idea-validator/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047109Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/instagram-login/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047114Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/letsbegin/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047119Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/marketing-writer/SKILL.md: missing YAML frontmatter delimited by ---
+2026-09-11T08:37:15.047124Z ERROR codex_core::session::session: failed to load skill /Users/macstudio3/.agents/skills/_archived/residential-wallpaper-updater/SKILL.md: missing YAML frontmatter delimited by ---
+OpenAI Codex v0.153.4
+--------
+workdir: /tmp
+model: gpt-6-astra
+provider: openai
+approval: never
+sandbox: read-only
+reasoning effort: none
+reasoning summaries: none
+session id: 01a08f9d-120f-7563-bd72-f871deea0719
+--------
+user
+Final forced choice for cycle0823. Pick SHIP, FIX-THEN-SHIP, HOLD-FOR-STEVE, or KILL. SHIP means accept ONLY local prepared artifact plus truthful evidence, never authorize integration or call source done. All24queue entries assessed in supplied order:15prepared-gated5external-blocked3no-safe1execute-local. One isolated helper candidate TK11456 e0c8af26 preserves inherited DTD_ZERO_COST1, canonical guard, HOME,8installed/control hashes; retained tmp on all exits; exact manifest/Codex isolation checks and3installedDTDentrypoints exercised behind deniedHTTP/runtime stubs. Owner and root actualCLI:positive0,fivenegatives1,no forbidden execution. Cody independently9distinctCLIcases pass plus8hashes, five distinct critics5SHIP IT for isolated prepared candidate. Reproduced evidence-path defect corrected and independently verified. Explicit SKIP: dynamic missing-environment test cannot run because cycle forbids clearing inherited DTD_ZERO_COST; only installed guard prologue structurally checked. No actual runner adoption, live recovery or operational ticket closure. Exact single-helper integration HOLD memo and verified durable bundle ready; source remains partial/blocked requiring scoped approval and later real-runner proof. Parent61realboardAPI/auth/canonical/scheduler checks passed; after your decision parent must rerun closing candidate flow from frozen bundle and checks, retain evidence, log source, append exact cycle ledger and exit for existing600slaunchd. No further candidate defect reproduced. No need to ask Steve before authorized local evidence retention. Cost0; Claude/Grok/Kimi disabled/unavailable, no paid APIs. Pick exactly one option. Begin with VERDICT: SHIP or VERDICT: FIX-THEN-SHIP or VERDICT: HOLD-FOR-STEVE or VERDICT: KILL on its own line, followed by one paragraph.
+2026-09-11T08:37:16.468900Z ERROR codex_skills_extension::loader::host: skills scan reached its traversal limit (root: file:///Users/macstudio3/.agents/skills)
+warning: Exceeded skills context budget. All skill descriptions were removed and 209 additional skills were not included in the model-visible skills list.
+codex
+VERDICT: SHIP
+
+Accept only the isolated local prepared artifact and truthful evidence bundle for TK11456 e0c8af26. The corrected defect and independent checks support this limited acceptance; the dynamic missing-environment test remains explicitly SKIP. Integration stays HOLD, and the source remains partial/blocked pending scoped approval and real-runner proof. Parent must rerun the closing candidate flow from the frozen bundle and checks, retain evidence, log source status, append the exact cycle ledger, and exit for the existing 600-second launchd schedule. This verdict authorizes no runner adoption, live recovery, or operational ticket closure.
+tokens used
+6,231
+VERDICT: SHIP
+
+Accept only the isolated local prepared artifact and truthful evidence bundle for TK11456 e0c8af26. The corrected defect and independent checks support this limited acceptance; the dynamic missing-environment test remains explicitly SKIP. Integration stays HOLD, and the source remains partial/blocked pending scoped approval and real-runner proof. Parent must rerun the closing candidate flow from the frozen bundle and checks, retain evidence, log source status, append the exact cycle ledger, and exit for the existing 600-second launchd schedule. This verdict authorizes no runner adoption, live recovery, or operational ticket closure.
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex.txt
new file mode 100644
index 00000000..610fb391
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/codex.txt
@@ -0,0 +1,3 @@
+VERDICT: SHIP
+
+Accept only the isolated local prepared artifact and truthful evidence bundle for TK11456 e0c8af26. The corrected defect and independent checks support this limited acceptance; the dynamic missing-environment test remains explicitly SKIP. Integration stays HOLD, and the source remains partial/blocked pending scoped approval and real-runner proof. Parent must rerun the closing candidate flow from the frozen bundle and checks, retain evidence, log source status, append the exact cycle ledger, and exit for the existing 600-second launchd schedule. This verdict authorizes no runner adoption, live recovery, or operational ticket closure.
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/grok.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/grok.txt
new file mode 100644
index 00000000..7b3ad95a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/grok.txt
@@ -0,0 +1 @@
+[grok unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/kimi.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/kimi.txt
new file mode 100644
index 00000000..ea4b5a56
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/kimi.txt
@@ -0,0 +1 @@
+[kimi unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/muse.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/muse.txt
new file mode 100644
index 00000000..3a84ae18
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/muse.txt
@@ -0,0 +1 @@
+[muse unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/question.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/question.txt
new file mode 100644
index 00000000..5973522b
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/question.txt
@@ -0,0 +1 @@
+Final forced choice for cycle0823. Pick SHIP, FIX-THEN-SHIP, HOLD-FOR-STEVE, or KILL. SHIP means accept ONLY local prepared artifact plus truthful evidence, never authorize integration or call source done. All24queue entries assessed in supplied order:15prepared-gated5external-blocked3no-safe1execute-local. One isolated helper candidate TK11456 e0c8af26 preserves inherited DTD_ZERO_COST1, canonical guard, HOME,8installed/control hashes; retained tmp on all exits; exact manifest/Codex isolation checks and3installedDTDentrypoints exercised behind deniedHTTP/runtime stubs. Owner and root actualCLI:positive0,fivenegatives1,no forbidden execution. Cody independently9distinctCLIcases pass plus8hashes, five distinct critics5SHIP IT for isolated prepared candidate. Reproduced evidence-path defect corrected and independently verified. Explicit SKIP: dynamic missing-environment test cannot run because cycle forbids clearing inherited DTD_ZERO_COST; only installed guard prologue structurally checked. No actual runner adoption, live recovery or operational ticket closure. Exact single-helper integration HOLD memo and verified durable bundle ready; source remains partial/blocked requiring scoped approval and later real-runner proof. Parent61realboardAPI/auth/canonical/scheduler checks passed; after your decision parent must rerun closing candidate flow from frozen bundle and checks, retain evidence, log source, append exact cycle ledger and exit for existing600slaunchd. No further candidate defect reproduced. No need to ask Steve before authorized local evidence retention. Cost0; Claude/Grok/Kimi disabled/unavailable, no paid APIs. Pick exactly one option. Begin with VERDICT: SHIP or VERDICT: FIX-THEN-SHIP or VERDICT: HOLD-FOR-STEVE or VERDICT: KILL on its own line, followed by one paragraph.
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/qwen.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/qwen.txt
new file mode 100644
index 00000000..b21b575a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/dtd-final/qwen.txt
@@ -0,0 +1,2 @@
+VERDICT: SHIP  
+The candidate (TK11456) has passed rigorous checks including isolation, CLI validation, and defect correction with independent verification. While the dynamic missing-environment test is blocked by cycle constraints, the evidence-path defect is resolved, and no further defects are reproducible. The integration is held due to partial source requirements, but the candidate meets SHIP criteria for local prepared artifact acceptance with truthful evidence. Parent checks are passed, and the process mandates rerunning the closing flow from the frozen bundle, retaining evidence, and logging source—consistent with SHIP’s non-integration, non-source-done authorization. Cost is zero, and no external APIs are involved, fulfilling all conditions for immediate SHIP approval.
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/final-dtd-verdict.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/final-dtd-verdict.json
new file mode 100644
index 00000000..66065819
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/final-dtd-verdict.json
@@ -0,0 +1,18 @@
+{
+  "decision": "SHIP",
+  "scope": "Isolated local prepared artifact only; integration and source outcome HOLD",
+  "confidence": "medium",
+  "availability": "2/6",
+  "votes": {
+    "Claude": "abstain disabled",
+    "Codex": "SHIP",
+    "Qwen": "SHIP",
+    "Grok": "abstain unavailable",
+    "Kimi": "abstain unavailable",
+    "Muse": "abstain unavailable"
+  },
+  "post_decision": "KEEP",
+  "dissent": "No valid minority vote. Post prosecutor: dynamic absence and operational proof remain incomplete. Judge: accept only prepared artifact, preserve SKIP and operational HOLD.",
+  "closing_obligations": "Bundle replay and61boundary checks PASS after final postKEEP; ledger/commit persistence pending",
+  "evidence": "dtd-final"
+}
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/new-memos.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/new-memos.json
new file mode 100644
index 00000000..b1c58e5c
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/new-memos.json
@@ -0,0 +1,9 @@
+[
+  {
+    "path": "/Users/macstudio3/.claude/yolo-queue/pending-approval/2026-09-11-TK-11456-retained-preflight-e0c8af2-HOLD.md",
+    "sha256": "9725658ed7b2c4b21dcd2d4335f2453986de6cc320a84164d73d1b0bc474f9de",
+    "scope": "Exactsinglehelperintegration",
+    "approval": "not granted",
+    "new_this_cycle": true
+  }
+]
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/ordered-dispositions.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/ordered-dispositions.json
index 222d2026..0f44333a 100644
--- a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/ordered-dispositions.json
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/ordered-dispositions.json
@@ -387,7 +387,9 @@
     "owner_evidence_limit": "Source-owner and owner-anywhere timestamps are distinct from loop activity; generic runtime presence is not proof of source ownership.",
     "candidate_commit": "e0c8af26e935daa34f08ac55bd9ed41a01054173",
     "execution_iteration": 1,
-    "deferred_by_execution_cap": false
+    "deferred_by_execution_cap": false,
+    "final_status": "blocked",
+    "final_reason": "Exact installed single-helper integration approval absent; real scheduled runner outcome and dynamic missing-environment proof unverified."
   },
   {
     "position": 16,
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/drift-panel.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/drift-panel.sh
new file mode 100644
index 00000000..3163a4ef
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/drift-panel.sh
@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+# DTD six-model panel: Claude + Codex + Qwen + Grok + Kimi + Muse.
+# Usage: bash scripts/panel.sh "<forced-choice question>"
+set -u
+
+QUESTION="${1:?usage: panel.sh \"<question>\"}"
+CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac
+RUN_ID="${RUN_ID:-$(date +%Y%m%d-%H%M%S)-$$-$RANDOM}"
+DIR="${DTD_DIR:-/tmp/dtd-$RUN_ID}"
+mkdir -p "$DIR"
+printf '%s' "$QUESTION" > "$DIR/question.txt"
+
+SECRETS_ENV="$HOME/Projects/secrets-manager/.env"
+key_from_cascade() {
+  local key="$1" file value=""
+  for file in "$HOME/.claude/skills/dtd/.env" "$SECRETS_ENV" /root/DW-Agents/.env; do
+    [[ -n "$value" || ! -f "$file" ]] && continue
+    value=$(grep "^${key}=" "$file" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"')
+  done
+  printf '%s' "${value:-${!key:-}}"
+}
+if [[ "$DTD_ZERO_COST" == 1 ]]; then
+  OPENAI_KEY=""
+  XAI_KEY=""
+  MOONSHOT_KEY=""
+else
+  OPENAI_KEY=$(key_from_cascade OPENAI_API_KEY)
+  XAI_KEY=$(key_from_cascade XAI_API_KEY)
+  MOONSHOT_KEY=$(key_from_cascade MOONSHOT_API_KEY)
+fi
+GROK_MODEL="${GROK_MODEL:-grok-4.5}"
+KIMI_MODEL="${KIMI_MODEL:-kimi-k2.5}"
+QWEN_URL="${OLLAMA_URL:-http://100.94.103.98:11434}"
+QWEN_MODEL="${QWEN_MODEL:-qwen3:14b}"
+MUSE_URL="${MUSE_URL:-http://127.0.0.1:11434}"
+MUSE_MODEL="${MUSE_MODEL:-muse-glimmer:30b-mlx}"
+CLAUDE_MODEL="${CLAUDE_MODEL:-sonnet}"
+LOG="$HOME/.claude/skills/cost-tracker/scripts/log.js"
+PIDS=()
+
+( if [[ "$DTD_ZERO_COST" == 1 ]]; then
+    echo "[claude disabled: DTD_ZERO_COST=1]" > "$DIR/claude.txt"
+  elif command -v claude >/dev/null 2>&1; then
+    claude -p "$QUESTION" --model "$CLAUDE_MODEL" --output-format text \
+      --no-session-persistence --disable-slash-commands --tools "" \
+      --max-budget-usd 0.50 > "$DIR/claude.txt" 2> "$DIR/claude.err" || \
+      echo "[claude unavailable]" > "$DIR/claude.txt"
+  else echo "[claude unavailable]" > "$DIR/claude.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$OPENAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.openai.com/v1/responses \
+      -H "Authorization: Bearer $OPENAI_KEY" -H "Content-Type: application/json" \
+      -d "$(jq -Rn --arg p "$QUESTION" '{model:"gpt-5.3-codex",input:$p}')" > "$DIR/codex.raw.json" 2>&1
+    jq -r '([.output[]? | select(.type=="message") | .content[]? | .text? // empty] | join("\n")) as $t | if ($t|length)>0 then $t else "[codex unavailable]" end' "$DIR/codex.raw.json" > "$DIR/codex.txt" 2>/dev/null || echo "[codex unavailable]" > "$DIR/codex.txt"
+    PT=$(jq -r '.usage.input_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null); CT=$(jq -r '.usage.output_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null)
+    [[ -n "$PT" && -n "$CT" && -x "$LOG" ]] && node "$LOG" --api openai_gpt5_3_codex --units "${PT}:input_token,${CT}:output_token" --app dtd --note "run $RUN_ID" 2>/dev/null || true
+  elif command -v codex >/dev/null 2>&1; then
+    timeout 180 codex exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check \
+      -C /tmp --output-last-message "$DIR/codex.txt" "$QUESTION" \
+      > "$DIR/codex.cli.log" 2>&1 || echo "[codex unavailable]" > "$DIR/codex.txt"
+  else echo "[codex unavailable]" > "$DIR/codex.txt"; fi ) & PIDS+=($!)
+
+( if ! curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    QWEN_URL=http://192.168.1.133:11434
+  fi
+  if curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$QWEN_URL/api/generate" -d "$(jq -Rn --arg m "$QWEN_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[qwen unavailable]") end' > "$DIR/qwen.txt" 2>&1
+  else
+    echo "[qwen unavailable]" > "$DIR/qwen.txt"
+  fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$XAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.x.ai/v1/chat/completions -H "Authorization: Bearer $XAI_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$GROK_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],temperature:0.3}')" > "$DIR/grok.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $t | if ($t|gsub("^\\s+|\\s+$";"")|length)>0 then $t else "[grok unavailable]" end' "$DIR/grok.raw.json" > "$DIR/grok.txt" 2>/dev/null || echo "[grok unavailable]" > "$DIR/grok.txt"
+  else echo "[grok unavailable]" > "$DIR/grok.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$MOONSHOT_KEY" ]]; then
+    curl -s --max-time 240 https://api.moonshot.ai/v1/chat/completions -H "Authorization: Bearer $MOONSHOT_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$KIMI_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],max_tokens:4000,temperature:1}')" > "$DIR/kimi.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $c | (.choices[0].message.reasoning_content // "") as $r | if (($c|gsub("^\\s+|\\s+$";""))|length)>0 then $c elif (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else "[kimi unavailable]" end' "$DIR/kimi.raw.json" > "$DIR/kimi.txt" 2>/dev/null || echo "[kimi unavailable]" > "$DIR/kimi.txt"
+  else echo "[kimi unavailable]" > "$DIR/kimi.txt"; fi ) & PIDS+=($!)
+
+( if curl -fsS --max-time 4 "$MUSE_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$MUSE_URL/api/generate" -d "$(jq -Rn --arg m "$MUSE_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[muse unavailable]") end' > "$DIR/muse.txt" 2>&1
+  else
+    echo "[muse unavailable]" > "$DIR/muse.txt"
+  fi ) & PIDS+=($!)
+
+( sleep 330; for p in "${PIDS[@]}"; do kill "$p" 2>/dev/null; done ) & WATCHDOG=$!
+wait "${PIDS[@]}" 2>/dev/null
+kill "$WATCHDOG" 2>/dev/null
+for m in claude codex qwen grok kimi muse; do [[ -s "$DIR/$m.txt" ]] || echo "[TIMEOUT]" > "$DIR/$m.txt"; done
+
+echo "DIR=$DIR"
+printf '%s\n' "REFERENCES=Claude/Anthropic:$CLAUDE_MODEL Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:$QWEN_MODEL Grok/xAI:$GROK_MODEL Kimi/Moonshot:$KIMI_MODEL Muse/Ollama:$MUSE_MODEL"
+ls -la "$DIR/" | grep -E '\.txt$'
+
+# controlled hash drift
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate-manifest.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate-manifest.codex
new file mode 100755
index 00000000..e860d699
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate-manifest.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-llnun3ud/duplicate-manifest.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate-manifest.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate-manifest.log
new file mode 100644
index 00000000..0a93793d
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate-manifest.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.6rG0sX
+manifest must contain exactly one agents_panel entry
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate.tsv b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate.tsv
new file mode 100644
index 00000000..73fa8a6a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/duplicate.tsv
@@ -0,0 +1,4 @@
+agents_panel	5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823
+agents_post	877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef
+claude_panel	64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c
+agents_panel	5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/e2e-proof.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/e2e-proof.json
new file mode 100644
index 00000000..5e64d4d5
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/e2e-proof.json
@@ -0,0 +1,150 @@
+{
+  "timestamp": "2026-09-11T08:34:12.945403+00:00",
+  "risk_tier": "R1",
+  "intent": "Candidate preflight retains evidence and fails closed before execution on invalid inputs",
+  "status": "partial",
+  "checks": [
+    {
+      "name": "positive",
+      "verdict": "PASS",
+      "exit_code": 0,
+      "command": [
+        "bash",
+        "/private/tmp/tk11456-scoped.qNOHKp/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-scoped.qNOHKp/config/yoloforever-dtd-sha256.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-llnun3ud/positive.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.kCAS4D",
+      "negative": false
+    },
+    {
+      "name": "missing-manifest",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/tk11456-scoped.qNOHKp/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-llnun3ud/missing.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-llnun3ud/missing-manifest.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.lLpo6T",
+      "negative": true
+    },
+    {
+      "name": "duplicate-manifest",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/tk11456-scoped.qNOHKp/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-llnun3ud/duplicate.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-llnun3ud/duplicate-manifest.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.6rG0sX",
+      "negative": true
+    },
+    {
+      "name": "missing-entry",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/tk11456-scoped.qNOHKp/scripts/verify-zero-cost-dtd.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-llnun3ud/missing-entry.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-llnun3ud/missing-entry.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.zrsRN5",
+      "negative": true
+    },
+    {
+      "name": "hash-drift",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/tk11456-scoped.qNOHKp/scripts/verify-zero-cost-dtd.sh",
+        "/private/tmp/tk11456-regression-llnun3ud/drift-panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-scoped.qNOHKp/config/yoloforever-dtd-sha256.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-llnun3ud/hash-drift.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.Jf9tWB",
+      "negative": true
+    },
+    {
+      "name": "unisolated-cli",
+      "verdict": "PASS",
+      "exit_code": 1,
+      "command": [
+        "bash",
+        "/private/tmp/tk11456-scoped.qNOHKp/scripts/verify-zero-cost-dtd.sh",
+        "/private/tmp/tk11456-regression-llnun3ud/unisolated-panel.sh",
+        "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+        "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+        "/private/tmp/tk11456-regression-llnun3ud/isolation.tsv"
+      ],
+      "log": "/private/tmp/tk11456-regression-llnun3ud/unisolated-cli.log",
+      "retained": "/private/tmp/yoloforever-zero-cost-preflight.snBguR",
+      "negative": true
+    },
+    {
+      "name": "protected-installed-and-control-hashes",
+      "verdict": "PASS",
+      "paths": [
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode",
+          "sha256": "8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/config/yoloforever-dtd-sha256.tsv",
+          "sha256": "5166f5f9dc27afc0fc4b1a3f32921ba8bdaea3b2c7d6102e85fd41ce1f594216"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/verify-zero-cost-dtd.sh",
+          "sha256": "d8be072c7f92ea603a59dd42804df2e26760cc5ba88ceaa0ad6ed03784e36d3f"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/verify-dtd-codex-isolation.sh",
+          "sha256": "850c17544fd79c8ed9704d7aa7650a7666c93924b16e1f8b76b75efa7f22685b"
+        },
+        {
+          "path": "/Users/macstudio3/Projects/ticket-system/scripts/codex-yoloforever.sh",
+          "sha256": "f5a36f1784ec614719067e67e78e483080527b4d6c24a591af0fa881d51d0de6"
+        },
+        {
+          "path": "/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh",
+          "sha256": "5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823"
+        },
+        {
+          "path": "/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh",
+          "sha256": "877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef"
+        },
+        {
+          "path": "/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh",
+          "sha256": "64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c"
+        }
+      ]
+    },
+    {
+      "name": "dynamic-missing-environment",
+      "verdict": "SKIP",
+      "reason": "Current cycle prohibits clearing or dropping inherited DTD_ZERO_COST. Reviewed prologue checked structurally only."
+    }
+  ],
+  "retention": "All fixture/runtime directories retained",
+  "evidence_directory": "/private/tmp/tk11456-regression-llnun3ud",
+  "cost_usd": 0
+}
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/hash-drift.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/hash-drift.codex
new file mode 100755
index 00000000..0c2d23fa
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/hash-drift.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-llnun3ud/hash-drift.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/hash-drift.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/hash-drift.log
new file mode 100644
index 00000000..861ee8f8
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/hash-drift.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.Jf9tWB
+DTD artifact hash mismatch: agents_panel
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/isolation.tsv b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/isolation.tsv
new file mode 100644
index 00000000..6400edac
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/isolation.tsv
@@ -0,0 +1,3 @@
+agents_panel	c62d3ad635af598fb41c029c8d272f079a420cd9812a34a71ff08e776d59c93b
+agents_post	877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef
+claude_panel	64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.codex
new file mode 100755
index 00000000..1cf0dce8
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-llnun3ud/missing-entry.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.log
new file mode 100644
index 00000000..356920b7
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.zrsRN5
+manifest must contain exactly one agents_panel entry
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.tsv b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.tsv
new file mode 100644
index 00000000..274b1621
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-entry.tsv
@@ -0,0 +1,2 @@
+agents_post	877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef
+claude_panel	64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-manifest.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-manifest.codex
new file mode 100755
index 00000000..61e5b293
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-manifest.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-llnun3ud/missing-manifest.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-manifest.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-manifest.log
new file mode 100644
index 00000000..4bce9a82
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/missing-manifest.log
@@ -0,0 +1,2 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.lLpo6T
+missing DTD hash manifest: /private/tmp/tk11456-regression-llnun3ud/missing.tsv
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/positive.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/positive.log
new file mode 100644
index 00000000..e502e208
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/positive.log
@@ -0,0 +1,12 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.kCAS4D
+VERIFIED agents_panel 5b88cc7c549abe0940c56a34471a10a5125ce23a58d6608ef98997b61647b823 /Users/macstudio3/.agents/skills/dtd/scripts/panel.sh
+VERIFIED agents_post 877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh
+VERIFIED claude_panel 64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh
+STRUCTURAL_GUARD_AND_ISOLATION /Users/macstudio3/.agents/skills/dtd/scripts/panel.sh
+STRUCTURAL_GUARD_AND_ISOLATION /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh
+STRUCTURAL_GUARD_AND_ISOLATION /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh
+SKIP dynamic missing-environment case: inherited DTD_ZERO_COST remains intact
+ISOLATED /Users/macstudio3/.agents/skills/dtd/scripts/panel.sh codex_exec=1
+ISOLATED /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh codex_exec=1
+ISOLATED /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh codex_exec=1
+PASS zero-cost preflight scoped checks; dynamic missing-environment case SKIP; evidence retained /private/tmp/yoloforever-zero-cost-preflight.kCAS4D
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-cli.codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-cli.codex
new file mode 100755
index 00000000..d3f19d4e
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-cli.codex
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf "ESCAPE\n" >> /private/tmp/tk11456-regression-llnun3ud/unisolated-cli.escape
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-cli.log
new file mode 100644
index 00000000..bd2d5acb
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-cli.log
@@ -0,0 +1,5 @@
+EVIDENCE_DIR=/private/tmp/yoloforever-zero-cost-preflight.snBguR
+VERIFIED agents_panel c62d3ad635af598fb41c029c8d272f079a420cd9812a34a71ff08e776d59c93b /private/tmp/tk11456-regression-llnun3ud/unisolated-panel.sh
+VERIFIED agents_post 877f177b8f3bfc9c17c44c4e20ea99df6d721b63c468aa5311e41223d71faeef /Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh
+VERIFIED claude_panel 64e97ddc590974764a28b2cec61a41988dcffcfc8f8cc024da60e37234c32d7c /Users/macstudio3/.claude/skills/dtd/scripts/panel.sh
+unisolated Codex invocation: /private/tmp/tk11456-regression-llnun3ud/unisolated-panel.sh
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-panel.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-panel.sh
new file mode 100644
index 00000000..4ecd5755
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-regression/unisolated-panel.sh
@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+# DTD six-model panel: Claude + Codex + Qwen + Grok + Kimi + Muse.
+# Usage: bash scripts/panel.sh "<forced-choice question>"
+set -u
+
+QUESTION="${1:?usage: panel.sh \"<question>\"}"
+CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac
+RUN_ID="${RUN_ID:-$(date +%Y%m%d-%H%M%S)-$$-$RANDOM}"
+DIR="${DTD_DIR:-/tmp/dtd-$RUN_ID}"
+mkdir -p "$DIR"
+printf '%s' "$QUESTION" > "$DIR/question.txt"
+
+SECRETS_ENV="$HOME/Projects/secrets-manager/.env"
+key_from_cascade() {
+  local key="$1" file value=""
+  for file in "$HOME/.claude/skills/dtd/.env" "$SECRETS_ENV" /root/DW-Agents/.env; do
+    [[ -n "$value" || ! -f "$file" ]] && continue
+    value=$(grep "^${key}=" "$file" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"')
+  done
+  printf '%s' "${value:-${!key:-}}"
+}
+if [[ "$DTD_ZERO_COST" == 1 ]]; then
+  OPENAI_KEY=""
+  XAI_KEY=""
+  MOONSHOT_KEY=""
+else
+  OPENAI_KEY=$(key_from_cascade OPENAI_API_KEY)
+  XAI_KEY=$(key_from_cascade XAI_API_KEY)
+  MOONSHOT_KEY=$(key_from_cascade MOONSHOT_API_KEY)
+fi
+GROK_MODEL="${GROK_MODEL:-grok-4.5}"
+KIMI_MODEL="${KIMI_MODEL:-kimi-k2.5}"
+QWEN_URL="${OLLAMA_URL:-http://100.94.103.98:11434}"
+QWEN_MODEL="${QWEN_MODEL:-qwen3:14b}"
+MUSE_URL="${MUSE_URL:-http://127.0.0.1:11434}"
+MUSE_MODEL="${MUSE_MODEL:-muse-glimmer:30b-mlx}"
+CLAUDE_MODEL="${CLAUDE_MODEL:-sonnet}"
+LOG="$HOME/.claude/skills/cost-tracker/scripts/log.js"
+PIDS=()
+
+( if [[ "$DTD_ZERO_COST" == 1 ]]; then
+    echo "[claude disabled: DTD_ZERO_COST=1]" > "$DIR/claude.txt"
+  elif command -v claude >/dev/null 2>&1; then
+    claude -p "$QUESTION" --model "$CLAUDE_MODEL" --output-format text \
+      --no-session-persistence --disable-slash-commands --tools "" \
+      --max-budget-usd 0.50 > "$DIR/claude.txt" 2> "$DIR/claude.err" || \
+      echo "[claude unavailable]" > "$DIR/claude.txt"
+  else echo "[claude unavailable]" > "$DIR/claude.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$OPENAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.openai.com/v1/responses \
+      -H "Authorization: Bearer $OPENAI_KEY" -H "Content-Type: application/json" \
+      -d "$(jq -Rn --arg p "$QUESTION" '{model:"gpt-5.3-codex",input:$p}')" > "$DIR/codex.raw.json" 2>&1
+    jq -r '([.output[]? | select(.type=="message") | .content[]? | .text? // empty] | join("\n")) as $t | if ($t|length)>0 then $t else "[codex unavailable]" end' "$DIR/codex.raw.json" > "$DIR/codex.txt" 2>/dev/null || echo "[codex unavailable]" > "$DIR/codex.txt"
+    PT=$(jq -r '.usage.input_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null); CT=$(jq -r '.usage.output_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null)
+    [[ -n "$PT" && -n "$CT" && -x "$LOG" ]] && node "$LOG" --api openai_gpt5_3_codex --units "${PT}:input_token,${CT}:output_token" --app dtd --note "run $RUN_ID" 2>/dev/null || true
+  elif command -v codex >/dev/null 2>&1; then
+    timeout 180 codex exec --ephemeral --sandbox read-only --skip-git-repo-check \
+      -C /tmp --output-last-message "$DIR/codex.txt" "$QUESTION" \
+      > "$DIR/codex.cli.log" 2>&1 || echo "[codex unavailable]" > "$DIR/codex.txt"
+  else echo "[codex unavailable]" > "$DIR/codex.txt"; fi ) & PIDS+=($!)
+
+( if ! curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    QWEN_URL=http://192.168.1.133:11434
+  fi
+  if curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$QWEN_URL/api/generate" -d "$(jq -Rn --arg m "$QWEN_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[qwen unavailable]") end' > "$DIR/qwen.txt" 2>&1
+  else
+    echo "[qwen unavailable]" > "$DIR/qwen.txt"
+  fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$XAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.x.ai/v1/chat/completions -H "Authorization: Bearer $XAI_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$GROK_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],temperature:0.3}')" > "$DIR/grok.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $t | if ($t|gsub("^\\s+|\\s+$";"")|length)>0 then $t else "[grok unavailable]" end' "$DIR/grok.raw.json" > "$DIR/grok.txt" 2>/dev/null || echo "[grok unavailable]" > "$DIR/grok.txt"
+  else echo "[grok unavailable]" > "$DIR/grok.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$MOONSHOT_KEY" ]]; then
+    curl -s --max-time 240 https://api.moonshot.ai/v1/chat/completions -H "Authorization: Bearer $MOONSHOT_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$KIMI_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],max_tokens:4000,temperature:1}')" > "$DIR/kimi.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $c | (.choices[0].message.reasoning_content // "") as $r | if (($c|gsub("^\\s+|\\s+$";""))|length)>0 then $c elif (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else "[kimi unavailable]" end' "$DIR/kimi.raw.json" > "$DIR/kimi.txt" 2>/dev/null || echo "[kimi unavailable]" > "$DIR/kimi.txt"
+  else echo "[kimi unavailable]" > "$DIR/kimi.txt"; fi ) & PIDS+=($!)
+
+( if curl -fsS --max-time 4 "$MUSE_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$MUSE_URL/api/generate" -d "$(jq -Rn --arg m "$MUSE_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[muse unavailable]") end' > "$DIR/muse.txt" 2>&1
+  else
+    echo "[muse unavailable]" > "$DIR/muse.txt"
+  fi ) & PIDS+=($!)
+
+( sleep 330; for p in "${PIDS[@]}"; do kill "$p" 2>/dev/null; done ) & WATCHDOG=$!
+wait "${PIDS[@]}" 2>/dev/null
+kill "$WATCHDOG" 2>/dev/null
+for m in claude codex qwen grok kimi muse; do [[ -s "$DIR/$m.txt" ]] || echo "[TIMEOUT]" > "$DIR/$m.txt"; done
+
+echo "DIR=$DIR"
+printf '%s\n' "REFERENCES=Claude/Anthropic:$CLAUDE_MODEL Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:$QWEN_MODEL Grok/xAI:$GROK_MODEL Kimi/Moonshot:$KIMI_MODEL Muse/Ollama:$MUSE_MODEL"
+ls -la "$DIR/" | grep -E '\.txt$'
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents.log
new file mode 100644
index 00000000..5ab4d670
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents.log
@@ -0,0 +1,13 @@
+DIR=/private/tmp/yoloforever-zero-cost-preflight.kCAS4D/agents
+/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh: line 106: 17236 Terminated: 15          ( sleep 330; for p in "${PIDS[@]}";
+do
+    kill "$p" 2> /dev/null;
+done )
+REFERENCES=Claude/Anthropic:sonnet Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:qwen3:14b Grok/xAI:grok-4.5 Kimi/Moonshot:kimi-k2.5 Muse/Ollama:muse-spark-1.2
+-rw-r--r--   1 macstudio3  wheel   35 Sep 11 01:34 claude.txt
+-rw-r--r--   1 macstudio3  wheel   61 Sep 11 01:34 codex.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:34 grok.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:34 kimi.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:34 muse.txt
+-rw-r--r--   1 macstudio3  wheel   13 Sep 11 01:34 question.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:34 qwen.txt
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/claude.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/claude.txt
new file mode 100644
index 00000000..19b5d169
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/claude.txt
@@ -0,0 +1 @@
+[claude disabled: DTD_ZERO_COST=1]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex-debate.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex-debate.cli.log
new file mode 100644
index 00000000..e69de29b
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex-debate.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex-debate.txt
new file mode 100644
index 00000000..1d6ba3b0
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex-debate.txt
@@ -0,0 +1,3 @@
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex.cli.log
new file mode 100644
index 00000000..e69de29b
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex.txt
new file mode 100644
index 00000000..1d6ba3b0
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/codex.txt
@@ -0,0 +1,3 @@
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/grok.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/grok.txt
new file mode 100644
index 00000000..7b3ad95a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/grok.txt
@@ -0,0 +1 @@
+[grok unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/kimi.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/kimi.txt
new file mode 100644
index 00000000..ea4b5a56
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/kimi.txt
@@ -0,0 +1 @@
+[kimi unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/muse.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/muse.txt
new file mode 100644
index 00000000..3a84ae18
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/muse.txt
@@ -0,0 +1 @@
+[muse unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/question.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/question.txt
new file mode 100644
index 00000000..94cf4caf
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/question.txt
@@ -0,0 +1 @@
+Choose A or B
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/qwen.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/qwen.txt
new file mode 100644
index 00000000..87bac077
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/agents/qwen.txt
@@ -0,0 +1 @@
+[qwen unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/claude b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/claude
new file mode 100755
index 00000000..41263499
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/claude
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf 'FORBIDDEN_RUNTIME\n' >> "$DTD_PREFLIGHT_CALLS"
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/codex b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/codex
new file mode 100755
index 00000000..a108a8e7
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/codex
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+[[ "${DTD_ZERO_COST:-}" == 1 ]] || exit 98
+[[ "$HOME" == "$DTD_PREFLIGHT_HOME" && "${CODEX_HOME:-}" == "$DTD_PREFLIGHT_CODEX_HOME" ]] || exit 98
+printf 'CODEX_STUB cost=%s %s\n' "$DTD_ZERO_COST" "$*" >> "$DTD_PREFLIGHT_CALLS"
+out=''
+while (($#)); do
+  if [[ "$1" == --output-last-message ]]; then out="$2"; shift 2; else shift; fi
+done
+[[ -n "$out" ]] || exit 97
+printf 'VERDICT: A\nFixture output, not a model decision.\nFINAL: KEEP\n' > "$out"
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/curl b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/curl
new file mode 100755
index 00000000..fe2d1f03
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/curl
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf 'DENIED_HTTP %s\n' "$*" >> "$DTD_PREFLIGHT_CALLS"
+exit 22
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/node b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/node
new file mode 100755
index 00000000..65ac0da5
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/node
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+printf 'FORBIDDEN_NODE\n' >> "$DTD_PREFLIGHT_CALLS"
+exit 99
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/timeout b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/timeout
new file mode 100755
index 00000000..9584cd1e
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/bin/timeout
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+shift
+exec "$@"
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/calls.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/calls.log
new file mode 100644
index 00000000..5145dd9f
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/calls.log
@@ -0,0 +1,34 @@
+DENIED_HTTP -fsS --max-time 4 http://100.94.103.98:11434/api/tags
+DENIED_HTTP -fsS --max-time 4 http://127.0.0.1:11434/api/tags
+DENIED_HTTP -fsS --max-time 4 http://192.168.1.133:11434/api/tags
+CODEX_STUB cost=1 exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check -C /tmp --output-last-message /private/tmp/yoloforever-zero-cost-preflight.kCAS4D/agents/codex.txt Choose A or B
+CODEX_STUB cost=1 exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check -C /tmp --output-last-message /private/tmp/yoloforever-zero-cost-preflight.kCAS4D/agents/codex-debate.txt The six-model DTD panel reached preliminary decision A.
+
+Run a genuine adversarial debate. PROSECUTOR must make the strongest case that the preliminary decision is wrong. DEFENDER must answer that case using the decision constraints and evidence. JUDGE must then choose. End with exactly FINAL: KEEP or FINAL: OVERTURN, followed by one concise paragraph explaining the controlling argument. Do not defer and do not merely summarize.
+
+
+
+===== claude =====
+[claude disabled: DTD_ZERO_COST=1]
+
+===== codex =====
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
+
+===== qwen =====
+[qwen unavailable]
+
+===== grok =====
+[grok unavailable]
+
+===== kimi =====
+[kimi unavailable]
+
+===== muse =====
+[muse unavailable]
+DENIED_HTTP -s -m30 http://192.168.1.133:11434/api/generate -d {"model":"qwen3:14b","prompt":"hi","stream":false,"keep_alive":"30m","options":{"num_predict":1}}
+DENIED_HTTP -s -m30 http://100.114.147.58:11434/api/generate -d {"model":"qwen3:14b","prompt":"hi","stream":false,"keep_alive":"30m","options":{"num_predict":1}}
+DENIED_HTTP -s -m8 http://127.0.0.1:11434/api/tags
+DENIED_HTTP -s -m8 http://127.0.0.1:52415/state
+CODEX_STUB cost=1 exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check -C /tmp --output-last-message /private/tmp/yoloforever-zero-cost-preflight.kCAS4D/legacy/codex.txt Choose A or B
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy.log
new file mode 100644
index 00000000..e4c1eb7f
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy.log
@@ -0,0 +1,13 @@
+/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh: line 271: 17472 Terminated: 15          ( sleep "$WD"; for p in "${PIDS[@]}";
+do
+    kill "$p" 2> /dev/null;
+done )
+DIR=/private/tmp/yoloforever-zero-cost-preflight.kCAS4D/legacy
+-rw-r--r--   1 macstudio3  wheel   61 Sep 11 01:34 codex.txt
+-rw-r--r--   1 macstudio3  wheel   56 Sep 11 01:34 exo.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:34 grok.txt
+-rw-r--r--   1 macstudio3  wheel   39 Sep 11 01:34 heretic.txt
+-rw-r--r--   1 macstudio3  wheel   19 Sep 11 01:34 kimi.txt
+-rw-r--r--   1 macstudio3  wheel   36 Sep 11 01:34 muse.txt
+-rw-r--r--   1 macstudio3  wheel   13 Sep 11 01:34 question.txt
+-rw-r--r--   1 macstudio3  wheel   36 Sep 11 01:34 qwen.txt
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/codex.cli.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/codex.cli.log
new file mode 100644
index 00000000..e69de29b
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/codex.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/codex.txt
new file mode 100644
index 00000000..1d6ba3b0
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/codex.txt
@@ -0,0 +1,3 @@
+VERDICT: A
+Fixture output, not a model decision.
+FINAL: KEEP
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/exo.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/exo.txt
new file mode 100644
index 00000000..6e7194fb
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/exo.txt
@@ -0,0 +1 @@
+[exo unavailable: no good+safe model loaded on cluster]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/grok.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/grok.txt
new file mode 100644
index 00000000..7b3ad95a
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/grok.txt
@@ -0,0 +1 @@
+[grok unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/heretic.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/heretic.txt
new file mode 100644
index 00000000..a83a8292
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/heretic.txt
@@ -0,0 +1 @@
+[ERR heretic: Mac2 Ollama unreachable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/kimi.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/kimi.txt
new file mode 100644
index 00000000..ea4b5a56
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/kimi.txt
@@ -0,0 +1 @@
+[kimi unavailable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/muse.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/muse.txt
new file mode 100644
index 00000000..09d95ca6
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/muse.txt
@@ -0,0 +1 @@
+[ERR muse: Mac2 Ollama unreachable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/question.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/question.txt
new file mode 100644
index 00000000..94cf4caf
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/question.txt
@@ -0,0 +1 @@
+Choose A or B
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/qwen.txt b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/qwen.txt
new file mode 100644
index 00000000..b7219c33
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/legacy/qwen.txt
@@ -0,0 +1 @@
+[ERR qwen: Mac1 Ollama unreachable]
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/post.log b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/post.log
new file mode 100644
index 00000000..72d77375
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/parent-candidate-runtime/positive/post.log
@@ -0,0 +1 @@
+CODEX_DEBATE=/private/tmp/yoloforever-zero-cost-preflight.kCAS4D/agents/codex-debate.txt
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/FINAL-HOLD-MEMO.md b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/FINAL-HOLD-MEMO.md
new file mode 100644
index 00000000..577167ec
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/FINAL-HOLD-MEMO.md
@@ -0,0 +1,19 @@
+# TK-11456 — retained-evidence preflight candidate
+
+Decision requested: APPROVE / REVISE / BLOCK. Recommendation: HOLD until root independent verification, Cody review, and final DTD acceptance are recorded.
+
+Prepared isolated commit: `e0c8af26e935daa34f08ac55bd9ed41a01054173` at `/private/tmp/tk11456-scoped.qNOHKp`. Durable bundle and the exact single-helper integration patch: `/Users/macstudio3/Projects/ticket-system/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456`.
+
+Exact proposed approval scope: after fresh source-owner/activity and installed hash checks, apply only `integration-helper.patch` to `/Users/macstudio3/Projects/ticket-system/scripts/verify-zero-cost-dtd.sh`, retain its executable bit, run the candidate CLI with inherited DTD_ZERO_COST=1, and observe the next already-scheduled runner preflight. No schedule, runner source, cost guard, manifest, DTD entry point, provider credential, or external service change is included. No approval has been inferred or executed.
+
+The candidate preserves HOME/CODEX_HOME and inherited cost controls, retains a unique temporary directory on every exit, checks the installed canonical guard structurally, validates all three manifest entries and Codex isolation before runtime, and runs the three installed entry points behind denying HTTP/runtime stubs. The installed Codex capability check is help-only. Stub output is explicitly synthetic and is never a DTD vote.
+
+Evidence: actual candidate CLI positive run exited 0; five negative cases (missing manifest, duplicate entry, missing entry, hash drift, unisolated CLI) exited 1 before any runtime/provider command; all eight installed/control hashes remained unchanged. All runtime/fixture data is retained in the evidence directory. No UI boundary; CTA and screenrecord are not applicable.
+
+Limits: dynamic guard enforcement with DTD_ZERO_COST absent was NOT run because this cycle forbids dropping that control. Only the reviewed canonical prologue is structurally checked for that case. Integration and real subsequent runner operation remain untested, so TK-11456 remains partial/blocked. Any future authorization for a dedicated missing-environment validation must be explicit; the current unattended cycle does not authorize it.
+
+Rollback proposal if approved integration regresses: restore only the former helper blob with SHA256 d8be072c7f92ea603a59dd42804df2e26760cc5ba88ceaa0ad6ed03784e36d3f from the scoped snapshot c3aab1e; preserve all evidence. The previous helper remains incompatible with this unattended contract and must not be invoked as part of a rollback proof.
+
+Cost: $0 provider/API spend; no real model invocation in the candidate harness.
+
+Final local review, 2026-09-11T08:40:39.105127+00:00: root independently replayed frozen candidate; Cody9CLI cases and8protected hashes passed, five votes SHIP IT. Final DTD SHIP2/2 valid families, postKEEP, explicitly isolated preparation only. Root then rehydrated durable bundle and reran real candidate CLI positive+5negatives plus protected hashes;61closing API/auth/canonical/guard/scheduler checks PASS. Dynamic absence remains SKIP. No new approval or integration occurred; source now BLOCKED on the exact scope above and unverified operational outcome.
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/regression/drift-panel.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/regression/drift-panel.sh
new file mode 100644
index 00000000..3163a4ef
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/regression/drift-panel.sh
@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+# DTD six-model panel: Claude + Codex + Qwen + Grok + Kimi + Muse.
+# Usage: bash scripts/panel.sh "<forced-choice question>"
+set -u
+
+QUESTION="${1:?usage: panel.sh \"<question>\"}"
+CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac
+RUN_ID="${RUN_ID:-$(date +%Y%m%d-%H%M%S)-$$-$RANDOM}"
+DIR="${DTD_DIR:-/tmp/dtd-$RUN_ID}"
+mkdir -p "$DIR"
+printf '%s' "$QUESTION" > "$DIR/question.txt"
+
+SECRETS_ENV="$HOME/Projects/secrets-manager/.env"
+key_from_cascade() {
+  local key="$1" file value=""
+  for file in "$HOME/.claude/skills/dtd/.env" "$SECRETS_ENV" /root/DW-Agents/.env; do
+    [[ -n "$value" || ! -f "$file" ]] && continue
+    value=$(grep "^${key}=" "$file" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"')
+  done
+  printf '%s' "${value:-${!key:-}}"
+}
+if [[ "$DTD_ZERO_COST" == 1 ]]; then
+  OPENAI_KEY=""
+  XAI_KEY=""
+  MOONSHOT_KEY=""
+else
+  OPENAI_KEY=$(key_from_cascade OPENAI_API_KEY)
+  XAI_KEY=$(key_from_cascade XAI_API_KEY)
+  MOONSHOT_KEY=$(key_from_cascade MOONSHOT_API_KEY)
+fi
+GROK_MODEL="${GROK_MODEL:-grok-4.5}"
+KIMI_MODEL="${KIMI_MODEL:-kimi-k2.5}"
+QWEN_URL="${OLLAMA_URL:-http://100.94.103.98:11434}"
+QWEN_MODEL="${QWEN_MODEL:-qwen3:14b}"
+MUSE_URL="${MUSE_URL:-http://127.0.0.1:11434}"
+MUSE_MODEL="${MUSE_MODEL:-muse-glimmer:30b-mlx}"
+CLAUDE_MODEL="${CLAUDE_MODEL:-sonnet}"
+LOG="$HOME/.claude/skills/cost-tracker/scripts/log.js"
+PIDS=()
+
+( if [[ "$DTD_ZERO_COST" == 1 ]]; then
+    echo "[claude disabled: DTD_ZERO_COST=1]" > "$DIR/claude.txt"
+  elif command -v claude >/dev/null 2>&1; then
+    claude -p "$QUESTION" --model "$CLAUDE_MODEL" --output-format text \
+      --no-session-persistence --disable-slash-commands --tools "" \
+      --max-budget-usd 0.50 > "$DIR/claude.txt" 2> "$DIR/claude.err" || \
+      echo "[claude unavailable]" > "$DIR/claude.txt"
+  else echo "[claude unavailable]" > "$DIR/claude.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$OPENAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.openai.com/v1/responses \
+      -H "Authorization: Bearer $OPENAI_KEY" -H "Content-Type: application/json" \
+      -d "$(jq -Rn --arg p "$QUESTION" '{model:"gpt-5.3-codex",input:$p}')" > "$DIR/codex.raw.json" 2>&1
+    jq -r '([.output[]? | select(.type=="message") | .content[]? | .text? // empty] | join("\n")) as $t | if ($t|length)>0 then $t else "[codex unavailable]" end' "$DIR/codex.raw.json" > "$DIR/codex.txt" 2>/dev/null || echo "[codex unavailable]" > "$DIR/codex.txt"
+    PT=$(jq -r '.usage.input_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null); CT=$(jq -r '.usage.output_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null)
+    [[ -n "$PT" && -n "$CT" && -x "$LOG" ]] && node "$LOG" --api openai_gpt5_3_codex --units "${PT}:input_token,${CT}:output_token" --app dtd --note "run $RUN_ID" 2>/dev/null || true
+  elif command -v codex >/dev/null 2>&1; then
+    timeout 180 codex exec --ephemeral --ignore-user-config --sandbox read-only --skip-git-repo-check \
+      -C /tmp --output-last-message "$DIR/codex.txt" "$QUESTION" \
+      > "$DIR/codex.cli.log" 2>&1 || echo "[codex unavailable]" > "$DIR/codex.txt"
+  else echo "[codex unavailable]" > "$DIR/codex.txt"; fi ) & PIDS+=($!)
+
+( if ! curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    QWEN_URL=http://192.168.1.133:11434
+  fi
+  if curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$QWEN_URL/api/generate" -d "$(jq -Rn --arg m "$QWEN_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[qwen unavailable]") end' > "$DIR/qwen.txt" 2>&1
+  else
+    echo "[qwen unavailable]" > "$DIR/qwen.txt"
+  fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$XAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.x.ai/v1/chat/completions -H "Authorization: Bearer $XAI_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$GROK_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],temperature:0.3}')" > "$DIR/grok.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $t | if ($t|gsub("^\\s+|\\s+$";"")|length)>0 then $t else "[grok unavailable]" end' "$DIR/grok.raw.json" > "$DIR/grok.txt" 2>/dev/null || echo "[grok unavailable]" > "$DIR/grok.txt"
+  else echo "[grok unavailable]" > "$DIR/grok.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$MOONSHOT_KEY" ]]; then
+    curl -s --max-time 240 https://api.moonshot.ai/v1/chat/completions -H "Authorization: Bearer $MOONSHOT_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$KIMI_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],max_tokens:4000,temperature:1}')" > "$DIR/kimi.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $c | (.choices[0].message.reasoning_content // "") as $r | if (($c|gsub("^\\s+|\\s+$";""))|length)>0 then $c elif (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else "[kimi unavailable]" end' "$DIR/kimi.raw.json" > "$DIR/kimi.txt" 2>/dev/null || echo "[kimi unavailable]" > "$DIR/kimi.txt"
+  else echo "[kimi unavailable]" > "$DIR/kimi.txt"; fi ) & PIDS+=($!)
+
+( if curl -fsS --max-time 4 "$MUSE_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$MUSE_URL/api/generate" -d "$(jq -Rn --arg m "$MUSE_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[muse unavailable]") end' > "$DIR/muse.txt" 2>&1
+  else
+    echo "[muse unavailable]" > "$DIR/muse.txt"
+  fi ) & PIDS+=($!)
+
+( sleep 330; for p in "${PIDS[@]}"; do kill "$p" 2>/dev/null; done ) & WATCHDOG=$!
+wait "${PIDS[@]}" 2>/dev/null
+kill "$WATCHDOG" 2>/dev/null
+for m in claude codex qwen grok kimi muse; do [[ -s "$DIR/$m.txt" ]] || echo "[TIMEOUT]" > "$DIR/$m.txt"; done
+
+echo "DIR=$DIR"
+printf '%s\n' "REFERENCES=Claude/Anthropic:$CLAUDE_MODEL Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:$QWEN_MODEL Grok/xAI:$GROK_MODEL Kimi/Moonshot:$KIMI_MODEL Muse/Ollama:$MUSE_MODEL"
+ls -la "$DIR/" | grep -E '\.txt$'
+
+# controlled hash drift
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/regression/unisolated-panel.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/regression/unisolated-panel.sh
new file mode 100644
index 00000000..4ecd5755
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/regression/unisolated-panel.sh
@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+# DTD six-model panel: Claude + Codex + Qwen + Grok + Kimi + Muse.
+# Usage: bash scripts/panel.sh "<forced-choice question>"
+set -u
+
+QUESTION="${1:?usage: panel.sh \"<question>\"}"
+CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac
+RUN_ID="${RUN_ID:-$(date +%Y%m%d-%H%M%S)-$$-$RANDOM}"
+DIR="${DTD_DIR:-/tmp/dtd-$RUN_ID}"
+mkdir -p "$DIR"
+printf '%s' "$QUESTION" > "$DIR/question.txt"
+
+SECRETS_ENV="$HOME/Projects/secrets-manager/.env"
+key_from_cascade() {
+  local key="$1" file value=""
+  for file in "$HOME/.claude/skills/dtd/.env" "$SECRETS_ENV" /root/DW-Agents/.env; do
+    [[ -n "$value" || ! -f "$file" ]] && continue
+    value=$(grep "^${key}=" "$file" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"')
+  done
+  printf '%s' "${value:-${!key:-}}"
+}
+if [[ "$DTD_ZERO_COST" == 1 ]]; then
+  OPENAI_KEY=""
+  XAI_KEY=""
+  MOONSHOT_KEY=""
+else
+  OPENAI_KEY=$(key_from_cascade OPENAI_API_KEY)
+  XAI_KEY=$(key_from_cascade XAI_API_KEY)
+  MOONSHOT_KEY=$(key_from_cascade MOONSHOT_API_KEY)
+fi
+GROK_MODEL="${GROK_MODEL:-grok-4.5}"
+KIMI_MODEL="${KIMI_MODEL:-kimi-k2.5}"
+QWEN_URL="${OLLAMA_URL:-http://100.94.103.98:11434}"
+QWEN_MODEL="${QWEN_MODEL:-qwen3:14b}"
+MUSE_URL="${MUSE_URL:-http://127.0.0.1:11434}"
+MUSE_MODEL="${MUSE_MODEL:-muse-glimmer:30b-mlx}"
+CLAUDE_MODEL="${CLAUDE_MODEL:-sonnet}"
+LOG="$HOME/.claude/skills/cost-tracker/scripts/log.js"
+PIDS=()
+
+( if [[ "$DTD_ZERO_COST" == 1 ]]; then
+    echo "[claude disabled: DTD_ZERO_COST=1]" > "$DIR/claude.txt"
+  elif command -v claude >/dev/null 2>&1; then
+    claude -p "$QUESTION" --model "$CLAUDE_MODEL" --output-format text \
+      --no-session-persistence --disable-slash-commands --tools "" \
+      --max-budget-usd 0.50 > "$DIR/claude.txt" 2> "$DIR/claude.err" || \
+      echo "[claude unavailable]" > "$DIR/claude.txt"
+  else echo "[claude unavailable]" > "$DIR/claude.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$OPENAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.openai.com/v1/responses \
+      -H "Authorization: Bearer $OPENAI_KEY" -H "Content-Type: application/json" \
+      -d "$(jq -Rn --arg p "$QUESTION" '{model:"gpt-5.3-codex",input:$p}')" > "$DIR/codex.raw.json" 2>&1
+    jq -r '([.output[]? | select(.type=="message") | .content[]? | .text? // empty] | join("\n")) as $t | if ($t|length)>0 then $t else "[codex unavailable]" end' "$DIR/codex.raw.json" > "$DIR/codex.txt" 2>/dev/null || echo "[codex unavailable]" > "$DIR/codex.txt"
+    PT=$(jq -r '.usage.input_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null); CT=$(jq -r '.usage.output_tokens // empty' "$DIR/codex.raw.json" 2>/dev/null)
+    [[ -n "$PT" && -n "$CT" && -x "$LOG" ]] && node "$LOG" --api openai_gpt5_3_codex --units "${PT}:input_token,${CT}:output_token" --app dtd --note "run $RUN_ID" 2>/dev/null || true
+  elif command -v codex >/dev/null 2>&1; then
+    timeout 180 codex exec --ephemeral --sandbox read-only --skip-git-repo-check \
+      -C /tmp --output-last-message "$DIR/codex.txt" "$QUESTION" \
+      > "$DIR/codex.cli.log" 2>&1 || echo "[codex unavailable]" > "$DIR/codex.txt"
+  else echo "[codex unavailable]" > "$DIR/codex.txt"; fi ) & PIDS+=($!)
+
+( if ! curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    QWEN_URL=http://192.168.1.133:11434
+  fi
+  if curl -fsS --max-time 4 "$QWEN_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$QWEN_URL/api/generate" -d "$(jq -Rn --arg m "$QWEN_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[qwen unavailable]") end' > "$DIR/qwen.txt" 2>&1
+  else
+    echo "[qwen unavailable]" > "$DIR/qwen.txt"
+  fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$XAI_KEY" ]]; then
+    curl -s --max-time 120 https://api.x.ai/v1/chat/completions -H "Authorization: Bearer $XAI_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$GROK_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],temperature:0.3}')" > "$DIR/grok.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $t | if ($t|gsub("^\\s+|\\s+$";"")|length)>0 then $t else "[grok unavailable]" end' "$DIR/grok.raw.json" > "$DIR/grok.txt" 2>/dev/null || echo "[grok unavailable]" > "$DIR/grok.txt"
+  else echo "[grok unavailable]" > "$DIR/grok.txt"; fi ) & PIDS+=($!)
+
+( if [[ "$DTD_ZERO_COST" != 1 && -n "$MOONSHOT_KEY" ]]; then
+    curl -s --max-time 240 https://api.moonshot.ai/v1/chat/completions -H "Authorization: Bearer $MOONSHOT_KEY" -H "Content-Type: application/json" -d "$(jq -Rn --arg m "$KIMI_MODEL" --arg p "$QUESTION" '{model:$m,messages:[{role:"user",content:$p}],max_tokens:4000,temperature:1}')" > "$DIR/kimi.raw.json" 2>&1
+    jq -r '(.choices[0].message.content // "") as $c | (.choices[0].message.reasoning_content // "") as $r | if (($c|gsub("^\\s+|\\s+$";""))|length)>0 then $c elif (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else "[kimi unavailable]" end' "$DIR/kimi.raw.json" > "$DIR/kimi.txt" 2>/dev/null || echo "[kimi unavailable]" > "$DIR/kimi.txt"
+  else echo "[kimi unavailable]" > "$DIR/kimi.txt"; fi ) & PIDS+=($!)
+
+( if curl -fsS --max-time 4 "$MUSE_URL/api/tags" >/dev/null 2>&1; then
+    curl -s --max-time 240 "$MUSE_URL/api/generate" -d "$(jq -Rn --arg m "$MUSE_MODEL" --arg p "$QUESTION" '{model:$m,prompt:("/no_think "+$p),stream:false,keep_alive:"1h",options:{num_predict:1500,temperature:0.3}}')" | jq -r '(.response // "") as $r | if (($r|gsub("^\\s+|\\s+$";""))|length)>0 then $r else (.thinking // "[muse unavailable]") end' > "$DIR/muse.txt" 2>&1
+  else
+    echo "[muse unavailable]" > "$DIR/muse.txt"
+  fi ) & PIDS+=($!)
+
+( sleep 330; for p in "${PIDS[@]}"; do kill "$p" 2>/dev/null; done ) & WATCHDOG=$!
+wait "${PIDS[@]}" 2>/dev/null
+kill "$WATCHDOG" 2>/dev/null
+for m in claude codex qwen grok kimi muse; do [[ -s "$DIR/$m.txt" ]] || echo "[TIMEOUT]" > "$DIR/$m.txt"; done
+
+echo "DIR=$DIR"
+printf '%s\n' "REFERENCES=Claude/Anthropic:$CLAUDE_MODEL Codex/OpenAI:gpt-5.3-codex Qwen/Ollama:$QWEN_MODEL Grok/xAI:$GROK_MODEL Kimi/Moonshot:$KIMI_MODEL Muse/Ollama:$MUSE_MODEL"
+ls -la "$DIR/" | grep -E '\.txt$'
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/scripts/verify-zero-cost-dtd.sh b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/scripts/verify-zero-cost-dtd.sh
new file mode 100755
index 00000000..bcdc8602
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/scripts/verify-zero-cost-dtd.sh
@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+# Retained-evidence, zero-network preflight for unattended cycles.
+set -euo pipefail
+
+AGENTS_PANEL="${1:-/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh}"
+AGENTS_POST="${2:-/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh}"
+CLAUDE_PANEL="${3:-/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh}"
+PROJECT_ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+MANIFEST="${4:-$PROJECT_ROOT/config/yoloforever-dtd-sha256.tsv}"
+CANONICAL_GUARD=/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode
+TMP=$(mktemp -d /private/tmp/yoloforever-zero-cost-preflight.XXXXXX)
+printf 'EVIDENCE_DIR=%s\n' "$TMP"
+# Every exit retains evidence. Never change caller cost controls or home settings.
+[[ "${DTD_ZERO_COST:-}" == 1 ]] || { echo 'inherited DTD_ZERO_COST must be 1' >&2; exit 78; }
+[[ -z "${DTD_COST_MODE_FILE:-}" || "$DTD_COST_MODE_FILE" == "$CANONICAL_GUARD" ]] || {
+  echo 'refusing non-canonical DTD cost-mode guard' >&2; exit 78;
+}
+[[ -r "$CANONICAL_GUARD" ]] || { echo 'missing canonical cost guard' >&2; exit 78; }
+[[ "$(tr -d '[:space:]' < "$CANONICAL_GUARD")" == ZERO_COST_REQUIRED ]] || {
+  echo 'canonical guard must require zero cost' >&2; exit 78;
+}
+[[ -f "$MANIFEST" ]] || { echo "missing DTD hash manifest: $MANIFEST" >&2; exit 1; }
+
+verify_hash() {
+  local key="$1" script="$2" expected actual matches
+  [[ -f "$script" ]] || { echo "missing DTD artifact: $script" >&2; exit 1; }
+  bash -n "$script"
+  matches=$(awk -F '\t' -v key="$key" '$1 == key { count++ } END { print count + 0 }' "$MANIFEST")
+  [[ "$matches" == 1 ]] || { echo "manifest must contain exactly one $key entry" >&2; exit 1; }
+  expected=$(awk -F '\t' -v key="$key" '$1 == key { print $2 }' "$MANIFEST")
+  [[ "$expected" =~ ^[0-9a-f]{64}$ ]] || { echo "invalid expected hash for $key" >&2; exit 1; }
+  actual=$(shasum -a 256 "$script" | awk '{ print $1 }')
+  [[ "$actual" == "$expected" ]] || { echo "DTD artifact hash mismatch: $key" >&2; exit 1; }
+  printf 'VERIFIED %s %s %s\n' "$key" "$actual" "$script"
+}
+verify_hash agents_panel "$AGENTS_PANEL"
+verify_hash agents_post "$AGENTS_POST"
+verify_hash claude_panel "$CLAUDE_PANEL"
+
+# Inspect before invoking any entry point. The manifest pins the reviewed bodies;
+# this exact prologue forces the filesystem mode before any runtime/provider path.
+python3 - "$AGENTS_PANEL" "$AGENTS_POST" "$CLAUDE_PANEL" <<'PY'
+import pathlib, re, sys
+prologue = '''CANONICAL_DTD_COST_MODE_FILE="/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode"
+if [[ -n "${DTD_COST_MODE_FILE:-}" && "$DTD_COST_MODE_FILE" != "$CANONICAL_DTD_COST_MODE_FILE" ]]; then
+  echo "[ERR refusing non-canonical DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2
+  exit 78
+fi
+DTD_COST_MODE_FILE="$CANONICAL_DTD_COST_MODE_FILE"
+[[ -r "$DTD_COST_MODE_FILE" ]] || { echo "[ERR missing/unreadable DTD cost-mode guard: $DTD_COST_MODE_FILE]" >&2; exit 78; }
+DTD_COST_MODE=$(tr -d '[:space:]' < "$DTD_COST_MODE_FILE")
+case "$DTD_COST_MODE" in
+  ZERO_COST_REQUIRED) DTD_ZERO_COST=1 ;;
+  PAID_ALLOWED) DTD_ZERO_COST="${DTD_ZERO_COST:-0}" ;;
+  *) echo "[ERR invalid DTD cost-mode guard: $DTD_COST_MODE]" >&2; exit 78 ;;
+esac'''
+for name in sys.argv[1:]:
+    source = pathlib.Path(name).read_text()
+    active = '\n'.join(line for line in source.splitlines() if not line.lstrip().startswith('#'))
+    position = active.find(prologue)
+    if position < 0:
+        sys.exit('missing reviewed canonical guard prologue: ' + name)
+    prefix = active[:position]
+    if any(word in prefix for word in ['curl', 'codex exec', 'OPENAI_KEY', 'key_from_cascade', 'source ', 'bash ']):
+        sys.exit('runtime precedes canonical guard: ' + name)
+    commands = [line for line in active.splitlines() if 'codex exec ' in line]
+    if not commands or any('--ignore-user-config' not in line.split() for line in commands):
+        sys.exit('unisolated Codex invocation: ' + name)
+    print('STRUCTURAL_GUARD_AND_ISOLATION', name)
+print('SKIP dynamic missing-environment case: inherited DTD_ZERO_COST remains intact')
+PY
+
+# Capability check is help-only. The reviewed helper invokes no model itself.
+"$PROJECT_ROOT/scripts/verify-dtd-codex-isolation.sh" "$AGENTS_PANEL" "$AGENTS_POST" "$CLAUDE_PANEL"
+mkdir -p "$TMP/bin"
+cat > "$TMP/bin/curl" <<'SHIM'
+#!/usr/bin/env bash
+printf 'DENIED_HTTP %s\n' "$*" >> "$DTD_PREFLIGHT_CALLS"
+exit 22
+SHIM
+cat > "$TMP/bin/claude" <<'SHIM'
+#!/usr/bin/env bash
+printf 'FORBIDDEN_RUNTIME\n' >> "$DTD_PREFLIGHT_CALLS"
+exit 99
+SHIM
+cat > "$TMP/bin/node" <<'SHIM'
+#!/usr/bin/env bash
+printf 'FORBIDDEN_NODE\n' >> "$DTD_PREFLIGHT_CALLS"
+exit 99
+SHIM
+cat > "$TMP/bin/codex" <<'SHIM'
+#!/usr/bin/env bash
+[[ "${DTD_ZERO_COST:-}" == 1 ]] || exit 98
+[[ "$HOME" == "$DTD_PREFLIGHT_HOME" && "${CODEX_HOME:-}" == "$DTD_PREFLIGHT_CODEX_HOME" ]] || exit 98
+printf 'CODEX_STUB cost=%s %s\n' "$DTD_ZERO_COST" "$*" >> "$DTD_PREFLIGHT_CALLS"
+out=''
+while (($#)); do
+  if [[ "$1" == --output-last-message ]]; then out="$2"; shift 2; else shift; fi
+done
+[[ -n "$out" ]] || exit 97
+printf 'VERDICT: A\nFixture output, not a model decision.\nFINAL: KEEP\n' > "$out"
+SHIM
+cat > "$TMP/bin/timeout" <<'SHIM'
+#!/usr/bin/env bash
+shift
+exec "$@"
+SHIM
+chmod +x "$TMP/bin/"*
+export PATH="$TMP/bin:/usr/bin:/bin:/usr/sbin:/sbin"
+export DTD_PREFLIGHT_CALLS="$TMP/calls.log"
+export DTD_PREFLIGHT_HOME="$HOME"
+export DTD_PREFLIGHT_CODEX_HOME="${CODEX_HOME:-}"
+: > "$DTD_PREFLIGHT_CALLS"
+DTD_DIR="$TMP/agents" bash "$AGENTS_PANEL" 'Choose A or B' > "$TMP/agents.log" 2>&1
+bash "$AGENTS_POST" "$TMP/agents" A > "$TMP/post.log" 2>&1
+DTD_DIR="$TMP/legacy" bash "$CLAUDE_PANEL" 'Choose A or B' > "$TMP/legacy.log" 2>&1
+[[ -s "$TMP/agents/codex.txt" && -s "$TMP/agents/codex-debate.txt" && -s "$TMP/legacy/codex.txt" ]]
+[[ $(grep -c '^CODEX_STUB cost=1 ' "$TMP/calls.log") == 3 ]]
+if grep -Eq 'FORBIDDEN_|api\.openai\.com|api\.x\.ai|api\.moonshot\.ai' "$TMP/calls.log"; then
+  echo 'preflight attempted forbidden runtime or provider' >&2; exit 1
+fi
+grep -q '^DENIED_HTTP ' "$TMP/calls.log"
+printf 'PASS zero-cost preflight scoped checks; dynamic missing-environment case SKIP; evidence retained %s\n' "$TMP"
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/test/verify-zero-cost-dtd-retained.py b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/test/verify-zero-cost-dtd-retained.py
new file mode 100644
index 00000000..65cb735f
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/preflight11456/test/verify-zero-cost-dtd-retained.py
@@ -0,0 +1,57 @@
+#!/usr/bin/env python3
+"""Exercise the actual candidate CLI; retain every fixture and evidence directory."""
+import hashlib, json, os, pathlib, re, subprocess, tempfile, datetime
+root = pathlib.Path(__file__).resolve().parents[1]
+work = pathlib.Path(tempfile.mkdtemp(prefix='tk11456-regression-',dir='/private/tmp'))
+assert os.environ.get('DTD_ZERO_COST') == '1'
+guard = pathlib.Path('/Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode')
+assert guard.read_text().strip() == 'ZERO_COST_REQUIRED'
+paths = [pathlib.Path('/Users/macstudio3/.agents/skills/dtd/scripts/panel.sh'), pathlib.Path('/Users/macstudio3/.agents/skills/dtd/scripts/post-decision-codex.sh'), pathlib.Path('/Users/macstudio3/.claude/skills/dtd/scripts/panel.sh')]
+manifest = root/'config/yoloforever-dtd-sha256.tsv'
+protected = json.loads((root/'verification/protected-baseline.json').read_text())
+rows=[]
+def run(name, scripts, mf, expected, message=None, negative=False):
+    env=os.environ.copy()
+    marker=work/(name+'.escape')
+    if negative:
+        recorder=work/(name+'.codex')
+        recorder.write_text('#!/usr/bin/env bash\nprintf "ESCAPE\\n" >> '+str(marker)+'\nexit 99\n')
+        recorder.chmod(0o755)
+        env['CODEX_BIN']=str(recorder)
+    cmd=['bash',str(root/'scripts/verify-zero-cost-dtd.sh'),*[str(p) for p in scripts],str(mf)]
+    log=work/(name+'.log')
+    with log.open('w') as stream:
+        result=subprocess.run(cmd,env=env,stdout=stream,stderr=subprocess.STDOUT,timeout=30)
+    text=log.read_text(); retained=pathlib.Path(re.search(r'EVIDENCE_DIR=(.+)',text)[1])
+    assert result.returncode == expected,(name,result.returncode,text)
+    assert retained.is_dir()
+    if message: assert message in text,(name,text)
+    if negative:
+        assert not marker.exists(), name+' executed capability command before rejection'
+        assert not (retained/'calls.log').exists(),name+' reached runtime stubs'
+    else:
+        calls=(retained/'calls.log').read_text()
+        assert calls.count('CODEX_STUB cost=1 ')==3
+        assert 'DENIED_HTTP' in calls
+        assert 'FORBIDDEN_' not in calls
+        assert all(provider not in calls for provider in ['api.openai.com','api.x.ai','api.moonshot.ai'])
+    rows.append(dict(name=name,verdict='PASS',exit_code=result.returncode,command=cmd,log=str(log),retained=str(retained),negative=negative))
+run('positive',paths,manifest,0,'PASS zero-cost preflight scoped checks')
+run('missing-manifest',paths,work/'missing.tsv',1,'missing DTD hash manifest',True)
+duplicate=work/'duplicate.tsv';duplicate.write_text(manifest.read_text()+manifest.read_text().splitlines()[0]+'\n')
+run('duplicate-manifest',paths,duplicate,1,'exactly one agents_panel',True)
+missing_entry=work/'missing-entry.tsv';missing_entry.write_text('\n'.join(manifest.read_text().splitlines()[1:])+'\n')
+run('missing-entry',paths,missing_entry,1,'exactly one agents_panel',True)
+drift=work/'drift-panel.sh';drift.write_text(paths[0].read_text()+'\n# controlled hash drift\n')
+run('hash-drift',[drift,*paths[1:]],manifest,1,'hash mismatch',True)
+isolation=work/'unisolated-panel.sh';isolation.write_text(paths[0].read_text().replace('--ignore-user-config ',''))
+newmanifest=work/'isolation.tsv';newmanifest.write_text(manifest.read_text().replace(hashlib.sha256(paths[0].read_bytes()).hexdigest(),hashlib.sha256(isolation.read_bytes()).hexdigest()))
+run('unisolated-cli',[isolation,*paths[1:]],newmanifest,1,'unisolated Codex invocation',True)
+for item in protected:
+    assert hashlib.sha256(pathlib.Path(item['path']).read_bytes()).hexdigest() == item['sha256'],item['path']
+assert os.environ.get('DTD_ZERO_COST')=='1'
+rows.append(dict(name='protected-installed-and-control-hashes',verdict='PASS',paths=protected))
+rows.append(dict(name='dynamic-missing-environment',verdict='SKIP',reason='Current cycle prohibits clearing or dropping inherited DTD_ZERO_COST. Reviewed prologue checked structurally only.'))
+report=dict(timestamp=datetime.datetime.now(datetime.timezone.utc).isoformat(),risk_tier='R1',intent='Candidate preflight retains evidence and fails closed before execution on invalid inputs',status='partial',checks=rows,retention='All fixture/runtime directories retained',evidence_directory=str(work),cost_usd=0)
+(work/'e2e-proof.json').write_text(json.dumps(report,indent=2)+'\n')
+print(json.dumps(report,indent=2))
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/verification/e2e-proof.json b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/verification/e2e-proof.json
new file mode 100644
index 00000000..fefe8264
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/verification/e2e-proof.json
@@ -0,0 +1,53 @@
+{
+  "intent": "Prepare a retained-evidence preflight compatible with the unattended cycle, without installed adoption",
+  "risk_tier": "R1 isolatedCLI; R0 monitoring",
+  "timestamp": "2026-09-11T08:40:39.111397+00:00",
+  "build_identity": "e0c8af26e935daa34f08ac55bd9ed41a01054173",
+  "environment": "macstudio3; Codex only; ZERO_COST_REQUIRED; inheritedDTD_ZERO_COST1",
+  "baseline": "Installedhelperoriginal byte-identical to scopedbaselinec3aab1e; original not executed",
+  "journey": [
+    "Candidate CLI validates canonicalguard/manifest/isolation before commands",
+    "Three installedDTD bodies run behind denying HTTP/runtime stubs",
+    "Negative inputs fail before capability/runtime escape",
+    "Retained logs survive exit",
+    "Fresh bundle checkout repeats journey",
+    "Actual board GET health/auth/canonical24parity;61checksPASS"
+  ],
+  "commands": [
+    "python3 test/verify-zero-cost-dtd-retained.py in frozen and freshbundlecheckouts",
+    "python3 verify_cycle.py closing-checks.json"
+  ],
+  "assertions": [
+    {
+      "boundary": "isolatedCLIpositive+5negatives",
+      "verdict": "PASS",
+      "evidence": "closing-candidate-replay.json"
+    },
+    {
+      "boundary": "eightinstalled/controlhashes",
+      "verdict": "PASS",
+      "evidence": "closing-candidate-replay.json"
+    },
+    {
+      "boundary": "boardAPI/auth/canonical/scheduler",
+      "verdict": "PASS",
+      "checks": 61,
+      "evidence": "closing-checks.json"
+    },
+    {
+      "boundary": "dynamicabsenceenvironment",
+      "verdict": "SKIP",
+      "reason": "Explicitcycleconstraint prohibits clearing/dropping inheritedcontrol; structuralprologuecheck only"
+    },
+    {
+      "boundary": "installedintegration/operationalrunner",
+      "verdict": "SKIP",
+      "reason": "No exact currentapproval; source remainsBLOCKED"
+    }
+  ],
+  "retention": "Freshtemporary fixtures retained; bundle and root/child/Cody runtime logs copieddurably",
+  "rollback": "No installed change; exactprevioushelperblob retained inbundle; futureintegrationrollback remainsproposal",
+  "result": "Localpreparedartifact accepted; sourceoutcomePARTIAL/BLOCKED, zerooperationalclosures",
+  "UI": "No UI changed. DomainCLI + realboardAPI substitute forCTA/screenrecord",
+  "cost_usd": 0
+}
\ No newline at end of file
diff --git a/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/verify_cycle.py b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/verify_cycle.py
new file mode 100644
index 00000000..b7c037a6
--- /dev/null
+++ b/data/codex-yoloforever/cycle-20260911T0823Z.lfFFf3/verify_cycle.py
@@ -0,0 +1,48 @@
+#!/usr/bin/env python3
+import base64,datetime,hashlib,json,os,pathlib,plistlib,subprocess,sys,urllib.request,urllib.error
+ROOT=pathlib.Path('/Users/macstudio3/Projects/ticket-system')
+DIR=pathlib.Path(__file__).resolve().parent
+checks=[]
+def check(name,condition,detail=None):
+ checks.append({'name':name,'verdict':'PASS' if condition else 'FAIL','detail':detail})
+def digest(p):return hashlib.sha256(pathlib.Path(p).read_bytes()).hexdigest()
+check('parent_zero_cost_environment',os.environ.get('DTD_ZERO_COST')=='1')
+check('canonical_cost_guard',(ROOT/'config/dtd-cost-mode').read_text().strip()=='ZERO_COST_REQUIRED')
+for x in json.loads((DIR/'protected-baseline.json').read_text()):check('protected:'+x['path'],digest(x['path'])==x['sha256'])
+for x in json.loads((DIR/'memo-readback.json').read_text()):check('memo:'+x['path'],digest(x['path'])==x['sha256'])
+ordered=json.loads((DIR/'ordered-dispositions.json').read_text())
+expected=[11395,11455,11363,11398,11384,11412,11420,11341,11454,11365,11435,11424,11387,11432,11456,11347,11345,11250,11436,11441,11427,11440,11428,11437]
+check('supplied_order_exact',[int(x['ticket'].split('-')[1]) for x in ordered]==expected)
+check('positions_complete',[x['position'] for x in ordered]==list(range(1,25)))
+check('allowed_dispositions',all(x['disposition'] in ['execute-local','prepared-gated','owner-active','external-blocked','no-safe-increment','deferred-execution-cap'] for x in ordered))
+js="const l=require('./lib.js');console.log(JSON.stringify([...l.tickets().values()].map(t=>({id:t.id,status:t.status,assignee:t.assignee,kind:t.kind,updated_at:t.updated_at}))))"
+canonical=json.loads(subprocess.run(['node','-e',js],cwd=ROOT,capture_output=True,text=True,check=True,timeout=20).stdout)
+cmap={x['id']:x for x in canonical}
+for x in ordered:
+ t=cmap[x['ticket']]
+ if int(x['ticket'].split('-')[1])!=11456:check('source_owner_status:'+x['ticket'],t['assignee']==x['assignee'] and t['status']==x['status'])
+ else:check('owned_source_not_closed',t['assignee']=='codex-yoloforever' and t['status'] in ['doing','blocked'])
+check('no_unverified_source_closures',all(not x.get('source_outcome_closed') for x in ordered))
+def fetch(path,auth=False):
+ headers={}
+ if auth:
+  # Local board's documented default only. No provider credentials are read.
+  headers['Authorization']='Basic '+base64.b64encode(b'admin:DW2024!').decode()
+ req=urllib.request.Request('http://127.0.0.1:9794'+path,headers=headers)
+ try:
+  with urllib.request.urlopen(req,timeout=8) as r:return r.status,r.read()
+ except urllib.error.HTTPError as e:return e.code,e.read()
+for name,path,auth,code in [('health','/healthz',False,200),('unauth','/api/tickets',False,401),('authenticated','/api/tickets',True,200)]:
+ try:
+  status,body=fetch(path,auth);check('HTTP:'+name,status==code,{'status':status,'bytes':len(body)})
+  if name=='health':check('health_body',body.strip()==b'ok')
+  if name=='authenticated' and status==200:
+   obj=json.loads(body); rows=obj if isinstance(obj,list) else obj.get('tickets',[]); amap={x['id']:x for x in rows}
+   check('API_canonical_24_identity_parity',all(x['ticket'] in amap and all(amap[x['ticket']].get(k)==cmap[x['ticket']].get(k) for k in ['status','assignee']) for x in ordered))
+ except Exception as e:check('HTTP:'+name,False,{'error':str(e)})
+plist=pathlib.Path('/Users/macstudio3/Library/LaunchAgents/com.steve.codex-yoloforever.plist')
+config=plistlib.loads(plist.read_bytes());check('existing_600_second_schedule',config.get('StartInterval')==600)
+check('STOPPED_absent',not (ROOT/'data/codex-yoloforever/STOPPED').exists())
+p=subprocess.run(['launchctl','print',f'gui/{os.getuid()}/com.steve.codex-yoloforever'],capture_output=True,text=True,timeout=10);check('existing_launchd_loaded',p.returncode==0)
+report={'intent':'Verify bounded cycle evidence, real board API/auth/canonical journey, and protected installed controls','risk_tier':'R1 local candidate/R0 monitoring','timestamp':datetime.datetime.now(datetime.timezone.utc).isoformat(),'checks':checks,'verdict':'PASS' if all(x['verdict']=='PASS' for x in checks) else 'FAIL','ui':'No UI changed; real API/canary flow used instead of CTA and screenrecord','side_effects':'GET requests and read-only canonical/scheduler checks; retained evidence only','limits':['No production adoption or source operational closure','DTD no-environment dynamic enforcement not executed; inherited control preserved']}
+out=DIR/(sys.argv[1] if len(sys.argv)>1 else 'closing-checks.json');out.write_text(json.dumps(report,indent=2));print(json.dumps({'output':str(out),'verdict':report['verdict'],'checks':len(checks),'failures':[x for x in checks if x['verdict']=='FAIL']}));sys.exit(0 if report['verdict']=='PASS' else 1)

← c4442e86 auto-data-snapshot: 2026-09-11T01:40:13 (148 data files) — d  ·  back to Ticket System  ·  Record bounded preflight cycle and retained closing proof 3ef85e23 →