Add native Codex session-record evidence adapter for configuration-verified routing

[Copilot]

Guildhall supported configuration_verified routing but only through full app-server JSON-RPC captures, which are not exposed by Codex desktop worker dispatch. This change adds a native session-record evidence path that can qualify configuration (not execution identity) from explicitly supplied, task-owned records.

• Native Codex evidence adapter (codex-native-session-v1)

  • Adds a new capture format in routing_evidence.py for native session records.
  • Validates worker/session/turn/response correlation, parent association, runtime-version consistency, completion matching, and substitution signals.
  • Preserves separation of concerns: requested vs configured vs observed; observed model/effort remain unknown for this lane.

• Usage normalization and fail-closed attribution rules

  • Normalizes usage from response records and token-count snapshots without double counting.
  • Handles retries, duplicate records, multi-turn captures, and snapshot-only captures (including empty response_ids inventories).
  • Returns unknown with explicit evidence gaps on conflicts/missing identity/configuration/completion data.

• Preflight and docs integration

  • Extends preflight record_access with codex-native-session-records mapped to candidate lane configuration_verified.
  • Updates host-evidence guidance to document supported native-record requirements and weaker guarantee boundaries.
  • Adds a redacted synthetic native capture example for reviewers/study inputs.

• Regression coverage

  • Adds native-path tests for happy path, parent/config conflicts, snapshot-only mode, per-turn multi-snapshot/multi-turn accounting, and fail-closed behavior.

# preflight lane selection now supports native Codex session records
lane = {
    'none': None,
    'claude-owned-transcript': 'execution_observed',
    'codex-owned-jsonrpc': 'configuration_verified',
    'codex-native-session-records': 'configuration_verified',
}[packet['record_access']]

• Fixes Add native Codex session-record adapter for configuration-verified routing #44

[coldtea-pr-lens]

◈ PR Lens

Note

Copilot opened this pull request, so PR Lens left it undrawn. Comment @pr-lens draw to draw it

_{github.comment.notice: false in .github/pr-lens.yml turns this note off}