Highlights
- Require native Worktree/Handoff lifecycle handling on host surfaces that declare task- or chat-bound managed workspaces.
- Verify a joint postcondition before task content or Git-history writes: trusted task workspace, default command
cwd, Git worktree root, and intendedHEAD/branch state must refer to the same environment. - Fail closed for unavailable, unverifiable, or unknown managed-workspace capability. Generic
git worktree addremains available only when trusted host/session evidence positively identifies a non-managed surface. - Preserve manual, dirty, untracked, or ownership-unknown worktrees without silent migration, stash, reset, overwrite, or deletion.
- Handle Codex-managed worktrees' documented detached
HEADdefault safely while still stopping on unexplained detachedHEAD. - Add Codex host guidance, compatibility/known-limitation updates, and deterministic contract checks for managed binding, unknown capability, CLI fallback compatibility, resolved path identity, and fail-closed behavior.
Verification
Fresh workflow-quality, skill-parser, boundary, governance, context-budget, and Codex plugin-sync checks passed. The representative Codex skill-trigger smoke passed when rerun independently.
The required full E2E command was attempted. Layer 2, Layer 3, and governance checks passed; Layer 1 retains the known environment-bound failure that the offline Codex benchmark fixture is unsupported on this Windows/Git Bash platform. This does not change the method-pack or host-authority claims.