Codex Plus v0.1.0-preview.11

Explicit same-thread native-owner recovery and inspectable history.

• Adds bootstrap owner_status, explicit owner_recover, and the operator codex-plus-owner CLI.
• Preserves the ownership guard, old bindings, reference identity and immutable archived history. Each endpoint recovers separately; caller and recipient failures identify the affected side.
• Refuses live helpers, active jobs, uncertain delivery, corrupt metadata and unsupported journal states. Recovery requires a fresh preview token and confirmation; it never silently retargets or replays intent.
• Retains acknowledged handling with unknown native turn completion as unknown. Existing approval preferences and worker/skill identities stay unchanged.

Validation: 351 fixture tests, inventory/whitespace gates, two identical complete release builds. The earlier seven-turn owned Codex 0.165.0 sample used invented stale state and the existing owner; final release-review hardening has fixture coverage, not a reopened native trial. Native release baseline remains 0.162.1. No daemon replacement, restart, real-session reset or long-run qualification is claimed.

All components share source 5c9ec1d. Install only the archives you need; already loaded processes adopt selected code on normal reconnect. See docs/owner-recovery.md for the contract, refusal conditions and evidence limits.