TRIAD Codex Dispatch 0.2.565

Codex now adopts triad-dispatch-lib 0.1.0.dev7 and reports canonical locations for invalid review-roster schema fields. The host preserves code, path, missing, document, and instance_path in a ValueError-compatible exception; CLI output includes the document and JSON path for located schema failures. Sensitive input values, unknown-key names and raw validator explanations are not included.

Exact authenticated dev5 and dev6 direct installations and existing shared generations remain supported after the pin upgrade. Existing shared generations are authenticated without executing their old modules; newly created Codex bindings still require the current dev7 pin. Frozen dev6 producer regressions cover both legacy defaults, old receipt present/absent, retained bindings and tamper refusal. Shared launcher selection, provider model/effort routing, refusal exit status and resource bundle identities are preserved. English/Korean upgrade and installation guidance is synchronized, including the distinction between a marketplace source directory and an installed plugin cache.

Library source: 62c3a741b729c6359cc5079a0306fad1fdd1fac8.

Malformed prior adoption records are refused with a controlled error before any managed runtime replacement. The previous 0.2.564 upgrade records remain intact in both README languages. Library issue #9 is closed after the requester's concrete location need was addressed; this host release adds Codex's rendering and adoption without reopening it.

This release includes the source archive, SHA256SUMS and a release-artifact manifest. The release source and reviewed tree are recorded below. Local installation and fresh-process exposure are separate checks; this release does not claim that an already running Desktop session has reloaded.

Verified source and review

• PR: #49
• Reviewed commit: e919d11bcc15a10107729ea25f7942a073db559c.
• Actual merged/release commit: 660abcb518d2246aeac33b6d3ec619ce2a564051.
• Identical source tree: 71c4756542ad06ef9457c6bc9999561f05fd67cd.
• Final local suite: 2685 passed, 5 route-specific skipped (macOS/Python3.12.13).
• Native PR CI40036329343: source and archive each 2685 passed/5 skipped on macOS; each 2683 passed/7 skipped on Ubuntu. Vendor verification, 4 isolated runtime checks and CodeQL passed.
• Fresh formal review 20261024-codex-dev7-r4-e919d11: Opus, Argon High, Flash High and fresh Sol6.1/xhigh all SAFE; canonical ADMITTED_SAFE with matching final source integrity. Digest b97f7bbde1525cebd5eedc666c01eb58ee8c397c2d85dd9350530c8bd4c2dc41.
• Post-merge CodeQL40057435656 passed. Post-merge host CI40057435631 passed: macOS source/archive each 2685 passed, 5 skipped; Ubuntu source/archive each 2683 passed, 7 skipped; all four isolated runtime and vendor checks passed on the exact merged commit.

Upgrade and follow-up notes

Follow the already-shared installation update procedure in docs/installation.md. Preserve retained bindings and old direct cache consumers. Codex CLI can remove old version cache paths during replacement; verified backups/restoration may be necessary for direct consumers. This does not guarantee uninterrupted old cache-path availability.

For custom Codex subagents with explicit skills.config absolute paths, repoint those entries to the newly installed canonical plugin root after each update, then start a new Codex session. The marketplace source path is not the installed plugin root. This release does not change custom-agent or global model/permission settings for you.

Two nonblocking formal-review suggestions were recorded: consistent internal exception type for malformed adoption version containers (the shipped CLI already refuses safely before mutation), and adding the custom-path upgrade reminder above to the future EN/KO README guidance. No blocking findings or open review questions remain.

Library issue #9 remains closed/completed. Additional diagnostic extensions and other hosts' code changes are outside this Codex port.

Release archive SHA-256: eba70a402f689ea121e003c4d34e6264591f31f690796909ff60b64712715242. The attached manifest authenticates all 394 tracked members and their Git modes.

Observed local installation verification

The installed 0.2.565 cache matched all 394 tracked release files/modes. Runtime registration preserved the old Codex receipt/binding and AGY legacy default while adding the new Codex binding. Verified backups restored the prior 0.2.563/0.2.564 cache paths; all seven checked configuration files remained unchanged.

Twenty launcher/help paths, three invalid selectors and two located schema refusals passed. A fresh ephemeral Codex session exposed all four installed skills with marker TRIAD_DEV7_0_2_565_ALL_FOUR_EXPOSED and no tool calls. This does not establish an existing Desktop-session reload or post-install vendor inference. Two inherited defaultPrompt strings exceed the observed CLI's 128-character metadata limit; explicit skill exposure succeeded, and that UI metadata follow-up is separate from this dev7 port.

v0.2.564 — shared runtime compatibility

Codex 0.2.564 shares the four generic TRIAD commands with verified existing consumers. A supported AGY installation keeps its original unqualified default; Codex resolves an authenticated consumer binding and executes from a retained toolkit.

• Adopt published triad-dispatch-lib 0.1.0.dev6, source 1872227abd42553635c733e0aa228548a577a732, wheel SHA256 5baf86483fe04935b2e21654508678eb21f7003a0038fb3875355a2e2967bfdc.
• Authenticate the complete hardened launcher group, context and supported runtime inventory before migration. Refuse partial, mixed, altered or unknown groups.
• Pin the retained toolkit, Python/provider paths and classifier location throughout public-v2 preparation, allocation, retry and collection. Native spawning and source-SOT behavior remain host-owned.
• Preserve prior consumers and active retained rounds through Codex updates/removal. Removal unregisters the selected receipt and conservatively keeps shared commands and assets.
• The shared bootstrap preserves global shell/Codex settings, including existing legacy fragments. Refresh all four skills and English/Korean installation and compatibility guidance.

Pre-migration direct rounds still require their original cache. Legacy AGY calls still require their original installation. All generic commands first use the most recently published Codex dispatcher's selected Python and library dependencies; keep that environment and retained binding metadata/launchers available. Only the selected consumer's complete toolkit inventory is checked at dispatch. Missing or incompatible dependencies can prevent every generic command, including the AGY default, from starting. Revalidate the installation after changing its interpreter. Independent older AGY installers/removers and removal of external Python/provider dependencies are outside this release's lifecycle guarantee. Claude and AGY maintainers own adoption in their hosts.

Final source review: independent Astra comparison and correction review approved; the complete Opus/Argon/Flash/Sol round 20261023-shared-host-r2-d7b9796 returned four SAFE verdicts, ADMITTED_SAFE and ROUND_INTEGRITY_OK on d7b97964add8f03165b29265d062b6f89a7e823f. Five non-blocking suggestions were adjudicated: persistent positive-selector regression coverage, actual AGY deployment evidence, clearer common-dispatcher prerequisites, bounded duplicate-validation refactoring, and malformed-input diagnostic formatting. No current supported-behavior defect remained. Actual AGY execution and source-level regression coverage remain separate claims.

Merged through PR #48 as 2eec0bb62e0de027332b45c12e59fab94cf2bbc8, with the exact reviewed tree 1fdd5301ffa19207648f2ef85a353c0111ebbad6. Final CI passed on macOS 15 and Ubuntu 24.04. Source and committed archive each passed 2,657 tests (5 skipped) on macOS and 2,655 (7 skipped) on Ubuntu; the two additional Ubuntu skips require a case-insensitive filesystem. Vendoring and isolated bundled-runtime checks passed on both. The CI checkout 8b8a5d44c613c1f4c7fdba39017db160e143caee has the same tree as the reviewed and merged source.

Publication and installed-runtime evidence are recorded separately. Library Issue #9 roster diagnostics is not implemented by this release. Published library host C81-C83 NOT RUN records remain immutable; later host deployment evidence does not certify all hosts or installation orders.

Post-publication local adoption: the installed release's 390 tracked files/modes and 27 adopted library files matched the merged source. The actual supported AGY 80-file baseline authenticated, original launcher payloads/target and bare AGY default were preserved, 12 bare/explicit/immutable help calls passed, and eight malformed/unknown-selector calls refused. Four copied-original tamper/partial-group checks refused without mutation. A fresh neutral CLI exposed all four installed skills with zero tool calls. These are identity, dispatch/help and context-exposure checks; installed live-provider inference and existing Desktop-session reload were not tested.

The Codex plugin manager can prune a previous version cache during update. Preserve any pre-migration direct-call target before that update; the retained-runtime guarantee covers rounds started with retained bindings. Plugin-manager configuration writes are separate from bootstrap preservation. The shared bootstrap and fresh probe left the seven post-plugin-update global-file hashes unchanged. Independent older AGY/Claude updaters remain host-owned follow-up work.

Local recovery after explicit owner approval: all 379 tracked 0.2.563 release files were restored to the original cache path and independently verified by hash and mode, including 26 adopted files. The 617 fingerprints covering the current 0.2.564 release, AGY baseline, shared runtime/launchers, receipts and global files were identical before/after recovery; plugin registration/version/enabled states were also unchanged. Untracked old cache metadata/logs were not recovered. This recovery is not a guarantee that later plugin-manager updates will retain old caches.

TRIAD Codex Dispatch 0.2.563

TRIAD Codex Dispatch 0.2.563 accepts AGY provider metadata without weakening verdict validation, switches the default AGY formal route to Argon/high, and supports an explicit 2400-second legacy review deadline.

• Allows --timeout 2400 in the three legacy provider wrappers. Existing Claude 1200-second and Google 600-second calls remain supported; other legacy timeout values remain refused. The AGY child receives 2390 seconds. Raw and public-v2 defaults are unchanged.
• Separates undeclared top-level toolAction and toolSummary metadata before AGY result validation while preserving original output. Declared application fields and aliases retain their validation. Strict original JSON, duplicate/non-finite rejection, verdict bindings, terminal failures and bounded recovery remain enforced.
• Rejects malformed terminal output wrapped in non-JSON Unicode whitespace, preventing an earlier SAFE payload from replacing a later terminal result. The regression is reproduced synthetically; occurrence in actual vendor output has not been observed.
• Uses gemini-4-argon-high with high for default AGY and fixed legacy review. Argon/Flash guidance is synchronized. Explicit raw/public-v2 model overrides and the separate Gemini CLI route remain supported.
• Bundles published triad-dispatch-lib 0.1.0.dev5 at 859f27c07c1123e87b50344f587999a0cbc172a6, with release-wheel SHA-256 833d55e9bf394885423bf1ed954a972747e1968b52b911b5253a9b7971512c7f and all 26 package/license identities pinned. No separate library installation is needed.

Formal review round 20261023-codex-agy-timeout-r5-91a7d3 closed with four SAFE verdicts (Claude, Argon, Flash and fresh native Codex), ROUND_INTEGRITY_OK, and ADMITTED_SAFE. Non-blocking observations and disposition are recorded in PR #47. The separate damaged-inventory artifact-persistence limitation remains.

Exact reviewed candidate: facbaaf98c9b74ee7b8f8753f3e48175ab7b273d.
Merged main/tag target: 89acf3a7c3deda49d0e48942020e5061e638aa61 (identical tracked source tree).
Archive: triad-codex-dispatch-0.2.563.tar.
SHA-256: aa18c6de19bbaa672548e028af1a30d639f39ce1a4e1525f728c6ab05e0c4f9a.
Every archive member was compared with its committed source bytes and executable mode (379 files).

Local macOS/Python 3.12.13 full suite: 2628 passed, 5 skipped. Native CI run 39912745899 passed source, clean committed archive and isolated bundled-runtime checks on macOS and Ubuntu against the same source tree. Source and archive each passed 2628 tests with 5 skips on macOS arm64/Python 3.12.10, and 2626 tests with 7 skips on Ubuntu x86_64/Python 3.12.15. CodeQL also passed.

Follow the Codex update procedure, rerun bootstrap from the returned installed cache, and start a fresh Codex session. If another host owns the four shared launcher names, choose their ownership or a separate supported launcher directory before applying bootstrap; do not overwrite another host's launchers blindly.

The tag-pinned changelog retains candidate and earlier-round status prose frozen before the final R5 review. This release record supplies the final publication and verification status. Source/archive checks, local installation, fresh-process skill exposure, and authenticated provider behavior remain distinct evidence.

TRIAD Codex Dispatch 0.2.562

Codex now bundles the published triad-dispatch-lib 0.1.0.dev4 package at 087af94a7078de0ae9701fb057840b5492f51f66.

• Includes the receipt module and fourth resource bundle in complete package and archive verification.
• Retains existing host facade calls, model/effort settings, native execution, scheduler and Python 3.12+ requirements.
• Records the published wheel hash, source and all 26 package/license file hashes. New library APIs are shipped as package content without changing host orchestration.
• Allows 60 minutes for native source/archive CI verification, after a previous Ubuntu job reached the old 45-minute limit despite completing its checks.

Use the normal Codex update procedure, rerun the installed bootstrap and open a fresh Codex session. A separate library installation is unnecessary. Other hosts can consume the library release and its adoption guide independently.

The tag-pinned library guide retains status prose written before publication. Current release identity is recorded in its published triad-release.json and this host's contracts/library-adoption.json.

Source candidate: 189ae665dbabeff9d72de51d0549dad120f2673e.
Merged main/tag target: db0fe780ff85483a98bafd3a1668dd8b7ab2f90f (identical source tree).
Archive: triad-codex-dispatch-0.2.562.tar.
SHA-256: a189d129600f97abe7c13dbf2e0b7d66cd2bc1861b93e0f23381310ed4822aa4.

Local macOS/Python 3.12.13 verification: 2,570 full tests passed with four existing provider-contract skips; 295 focused tests and 42 distribution contract tests passed. Fresh-venv runtime verification covered all four route labels and 24 binding, three overflow and one duplicate refusal, with no skips. All 378 archive members match the source Git objects and modes. This is not a claim of authenticated Gemini Enterprise provider conformance.

Native CI run 38950975865 passed on the exact candidate tree. Source and archive each passed 2,570 tests on macOS (four existing skips) and 2,568 on Ubuntu (six existing skips). All four isolated runtime reports passed with no skips.

Formal review round 20261017-codex-dev4-r3-86fd03 completed with canonical AGREED: Opus, Sol, Argon and Flash each returned SAFE TO MERGE, with no findings or open questions. See PR #45 for verification and scope details.

TRIAD Codex Dispatch 0.2.561

TRIAD Codex Dispatch 0.2.561

Explicit v2 JSON, verdict bindings, roster resolution and prompt rendering now use the bundled triad-dispatch-lib 0.1.0.dev3 from reviewed source 2d1e62e7de6f33fa13a918a39579c6b5e74def00. Independent pins verify the complete package, license and resource bundles. Runtime use needs no separate library checkout or download. Native provider adapters, authentication, classifiers, spawning and recovery remain host-owned; the shared review scheduler is not adopted.

The bundled update settles callbacks created before overflowing wait setup and retains the concurrent CPython cache-publication correction. Host prompt-path encoding preserves CR/LF, quotes and non-ASCII filename identity. Compatibility-resource regressions cover the retained host assets. Missing or unexpected bundled paths are reported with their verifier cause and bootstrap recovery guidance, preserving conflicting files. See the changelog and refresh record.

Use the supported update procedure, satisfy the shipped requirements in your selected Python 3.12+ environment, run the newly installed bootstrap from your target workspace, and start a fresh Codex session. Prepare a new review ID and basis after updating. Legacy formal metadata and web-clause helpers also require the verified bundled parser; restore exact package content before retrying an integrity refusal. Claude's independent adoption handoff and the Gemini Argon Google-route handoff retain separate host and route boundaries.

Reviewed commit: c81c02984825af7dd1ec69a14af83f0ff18d0551; tree: 9cf7e01b82ef071b4922fede47cbb813a34778b9. Native CI run 38665062677 passed on both platforms. Its checkout 0c54812517c5829cd09ebd2fb0e0881f88ffc39f is the synthetic merge of this candidate into bd96cdbf0eb83e2187b2b7fa3ac9cd701b58db7e, with the identical tracked tree.

Native runner	Runtime	Source tests	Extracted archive tests
Ubuntu 24.04 x86_64	Python 3.12.15	2,555 passed, 6 skipped in 676.65s	2,555 passed, 6 skipped in 707.51s
macOS 15.7.9 arm64	Python 3.12.10	2,557 passed, 4 skipped in 944.35s	2,557 passed, 4 skipped in 891.98s

Four existing skips cover AGY JSON-schema transport and Gemini model/effort contracts; Ubuntu also skips two case-insensitive filesystem cases. Both source and archive isolated runtime checks validated exact bundled module origins, all four routes, 24 binding refusals, three overflow refusals, one duplicate refusal and no runtime skips. Their temporary environments used a parent path containing Hangul, quotes and a literal backslash-n; the reported environment removal and child absence were checked before each result was printed. Both jobs verified 80 packaged hash targets.

The uploaded triad-codex-dispatch-0.2.561.tar contains all 373 tracked files with bytes and modes matching the reviewed commit, including the 23 pinned package/license files. Its SHA-256 is b066b1756b0486b7d9b494e517e86a9e5a43eca31efd69085fe6b6470e1dc996. The public release assets were downloaded again: the tar is byte-identical to the prepared artifact, and SHA256SUMS and GitHub's asset digests agree. The public tag targets the reviewed commit above. The CI synthetic-merge archive has a separate hash, 69e655d0f4e55bc87abc1751de596f3a3b3a68d1b24d2940d719e3fcb30ba21d; it is not the uploaded release archive.

Final round 20261015-codex-library-r5-69ca5c returned SAFE from all four selected legs. Canonical collection returned AGREED with final integrity checks passing; the closed round was exported. PR #44 retains two nonblocking limits: the internal schema-loader import works under the current exact pin but needs attention during future refreshes; a path containing the exact canonical caveat sentence can suppress the separate residual caveat paragraph for Claude/Codex. The residual remains encoded and fenced; provider or security impact has not been observed. No general filename exclusion is claimed.

These results establish reviewed source, native CI, published archive identity and downloaded-asset equality. Local installation and fresh installed-session exposure are separate workstation checks. These results do not establish another host's adoption, authenticated-provider success or effective company policy.

TRIAD Codex Dispatch 0.2.560

Fixes #42: formal public-v2 guarded-worktree Gemini reviews can read their required task and diff when the sealed packet is outside the product workspace. Generated calls add only the exact bound shared directory through Gemini's native --include-directories; the product cwd and read-only policy stay intact.

Packet access is bound through the existing preflight and allocation. Invalid or changed controls refuse before inference. Result bindings, raw investigations and prepared-directory behavior are unchanged. A valid negative result caused by unavailable inputs remains a blocked review, not a transport retry.

After updating, open a fresh Codex session and create a new review ID/basis. Do not reuse or hand-edit an old allocation.

Shared specification: R-PREPARE/C79, spec PR #14. This clarification does not change tagged spec adoption or Claude's existing packet co-location.

Verification on macOS arm64 / Python 3.12.13: source suite and immutable release archive each passed 2,462 tests with 4 route skips; focused source checks passed 148 tests with 4 skips; four skill validators passed. All 335 tracked archive files match the reviewed commit d0f32ad89be037884d39a48bfcec123358e8f4c3, including the 52 packaged hash targets. Unrelated untracked source files were preserved; this is immutable archive verification, not a claim that the original checkout was completely clean. Native Ubuntu verification was not run here.

Asset SHA-256: b771a47594321310fbbfc981e7a18bcf85601fc6c0c88c7c92eba39466d923e9 for triad-codex-dispatch-0.2.560.tar.

Independent final review with owner-authorized web and official source lookup: Sol/xhigh, Astra/high and AGY Google Pro/high all returned SAFE on the same candidate and digest, with matching before/after integrity (triad-gemini-packet-20261012-r2). A nonblocking suggestion to comment on hypothetical future native changes was declined because it identifies no current defect; the version-specific evidence limits remain explicit. Claude uses the owner's standing quota exception.

Authenticated Gemini validation remains for the owner's company environment after release. Local verification uses deterministic wrapper regressions and the official Gemini CLI 0.63.0 native file-tool implementation without inference; it does not establish enterprise authentication, service availability or effective company policy. No local plugin installation or fresh installed-session success is claimed by this release.

v0.2.559

TRIAD 0.2.559 publishes the completed spec-to-code changes after installed review dispatch and release verification.

• One vendor invocation per wrapper call; no automatic whole-CLI capacity/schema replay.
• AGY print-timeout partial answers are rejected while authentication priority is preserved.
• Read-only AGY requires 1.2.1+ and explicit native profiles. Gemini CLI requires 0.63.0+ across routes. Legacy Claude uses the CLI-resolved opus alias.
• Public v2 binds standing review-web authorization. Legacy cleanup preserves edited or uncertain agent files.
• English/Korean upgrade and setup guidance is aligned with the release.

Use the documented marketplace/local Git update, rerun bootstrap, and start a fresh Codex session. Provision or update the two AGY profiles explicitly when needed; dispatch does not alter global settings.

Verification: 2447 passed, 4 skipped in 431.02s (0:07:11) on native macOS arm64 with Python3.12.13; 102 focused checks; all 334 committed archive files and 52 distribution targets matched. Installed Sol/xhigh, Astra/high and Google Pro/high calls completed; final release review returned SAFE from every selected reviewer with matching integrity. Claude was not rerun: the owner selected existing quota-failure evidence. No Ubuntu or universal service-conformance claim.

The original checkout retains seven unrelated untracked files. The published immutable commit archive and its extracted test suite were verified directly; clean-checkout verifier success is not claimed.

Release/source commit: b42bf2fbb8f6a0e69b4765002a535ff0c702e40f. Merged main: 6cc7271f29e51353932b66fcd3c9cea29b16783d (identical tree). The tag targets the tested source commit, which is included in main.

SHA-256 (triad-codex-dispatch-0.2.559.tar): 787cab658c8a9c7391d4d7a0ea42e2fd623d07543b98e830ed6bb77894918cbf.

v0.2.558 — Review phases, selected-roster agreement and Gemini 3.8 setup

Public v2 reviews now bind the review phase to its purpose: formal-plan uses the shared plan purpose; pre-merge and implementation-review use the code purpose. Omission defaults to pre-merge; null and unknown values are refused before dispatch.

Every selected enabled review entry must explicitly approve the current basis with SAFE TO MERGE. Valid negative verdicts remain nonapproved, including Minor-only negatives; a separate family-count threshold no longer vetoes an otherwise agreed selected roster.

Leader guidance covers current environment and evidence, verified findings and refutations, one compact residual, and evidence-based reopening. Unresolvable wording disputes stop without manufacturing approval. Exact model IDs, existing JSON configuration, authentication, legacy entrypoints and guarded cleanup remain preserved.

Update with the English guide or Korean guide, rerun bootstrap and start a new Codex session.

Native Gemini CLI can now select exact gemini-3.8-flash with its model-specific 0.61.0 compatibility floor; existing models keep their earlier floor. Its upstream HIGH generation default and optional native JSON overrides are documented separately from AGY effort. Shipped model defaults and the existing roster schema are unchanged. Each OS owner runs common and OS-specific checks on that OS's host or native CI runner.

Validation:

• Exact current macOS archive: 1,828 tests passed, 2 Gemini-only fixture variants skipped; all 49 source/archive hash targets match.
• New Gemini compatibility TDD: 119 passed, 2 skipped after observed RED. Both installation guides' JSON examples parse.
• Current CodeQL CI passed. Current R4 explicitly approved by Opus, Pro, Flash and Astra; ROUND_INTEGRITY_OK and ALL_SELECTED_APPROVED.
• Previous implementation's Ubuntu container results are historical observations, not current native Ubuntu proof. No cross-OS Docker test was run for this amendment.
• Prior source skill structure, schema validator and provider-free lifecycle passed; the amendment did not change the skill bodies.

Archive source commit: 632f42633d3a92d6cb27168cd15c4d4debd8558c.
Archive SHA-256: fa04b7b7a7eddec1d3afd2f4318ee193a3494e21fa6ccb01213a061d18c38bfe.

The shipped shared payload advances from contracts 055204c and prompts 7f527ef to 04245c740afc9be36ad7702a134f71aec8ff0b7f. Shared-spec PR #8 separately publishes the implementation guide on shared main 19f0cf1f6772ad1c480d828c53129d50910495db; this release does not adopt that revision marker or claim Claude-host conformance. It does not claim measured prompt-quality improvement, hidden runtime-model attestation, authenticated all-provider policy certification or reload of existing Desktop sessions.

Verified Gemini setup covers stable 0.61.0+; preview/nightly adapter acceptance does not prove the alias or inherited HIGH configuration exists in every prerelease build.

Published main merge: 7f75863. Its tree equals the tested archive source commit above.

TRIAD Codex Dispatch 0.2.557

Claude reviews now default to claude-opus-5-5 with xhigh. Both the v2 default roster and legacy formal route select the exact ID; the capability preflight recognizes Opus 5.5 and refuses a conflicting explicit selection.

The default route requires Claude Code 2.1.280+ (Opus 5.5 was introduced in that release); validation used 2.1.282.

Existing v2 overrides, null selection and supported older models remain available. Raw wrappers preserve caller selection. Timeouts, authentication, web authorization and no-fallback controls remain unchanged.

Install or update using the English guide or Korean guide, rerun bootstrap, then start a new Codex session.

Shared rule/cases and Claude-host handoff: codefoundry-io/triad-dispatch-spec#4.
Claude-host native-agent adoption remains separate; its source has not been changed by this release.

Validation:

• Dedicated source RED/GREEN: 127 focused tests; 1,686 full source tests; both skill validators passed.
• Clean extracted release archive: 1,686 tests passed; 48 source/archive hash targets match. Installation also checks all four skill bodies and every changed shipped file.
• Release metadata contracts: 42 passed; shared specification: 106 passed and authoring map valid.
• Actual Claude Code 2.1.282 selection preflight recognized the requested exact ID. This is distinct from runtime-model attestation.
• Final four-leg review: all four SAFE, no blocking findings or open questions; ROUND_INTEGRITY_OK and ADMITTED_SAFE. Two non-blocking maintenance suggestions were adjudicated separately; no current behavior defect remained.

Archive source commit: 8bc6b07684058eccc0ed6e7f632077ef4a207b8c.
Archive SHA-256: d0ba433f6f50439bbd47d03244881be6640296b09dea0dd537bc43adb11ae418.
Merged main commit: 0dbd6c2f17b9aeced4bfb268d0b34e6c89d5a061. Its Git tree 32b2f8ee17dc4bb01bcbb16b92fb668b42ba1451 exactly equals the tested archive source. Shared-spec main: 41878ba2b8aacae6d860d84c37470c4096d7c6cf.

This release does not change a shared-spec revision marker or claim Claude-host conformance, all-provider web-policy certification or reload of existing Desktop sessions.

TRIAD Codex Dispatch 0.2.556

TRIAD Codex Dispatch 0.2.556 adds the opt-in v2 review workflow, owner-requested web verification, stronger transport evidence, and English/Korean installation guidance.

• Resolve and invoke all enabled roster entries, collect immutable per-entry attempts, and preserve all six bound result fields. Existing legacy and raw/custom-schema interfaces remain available.
• Enable web verification for participating legs only when the owner directly requests it for that round. Default reviews remain no-web; native availability and existing owner restrictions are checked before dispatch.
• Preserve transport failures, original verdicts, nullable adapter defaults and observed runtime identity. Reject reserved evidence paths before partial writes.
• Install through the GitHub marketplace or a local Git clone. Both language guides cover personal settings, existing configuration, updates and source switching. Legacy Gemini CLI / Gemini 구버전 CLI 사용 is the display label; authentication and version requirements remain unchanged.

Installation: English · 한국어.

Release commit: 5a12f822b6e19f5ecd162e4cc54888269ec0ffd9. Use this full commit ID with the local Git guide for a pinned installation. The marketplace install route follows main.

The attached archive was produced and tested at 2d4d71b1a6df09b26fae44d228229cd9aa43218d; its Git tree is identical to the release commit. SHA256SUMS verifies the attached archive:

fb1bd7b9f5e49855cdadd88838b51ef7e1a7fd09c0ea961a75af8adbd1684a79  triad-codex-dispatch-0.2.556.tar

Validation: 1,682 tests passed from the clean extracted archive; 48 package targets and all five final release-document changes match the source. A fresh source executor passed 46 relevant tests, skill validation and the provider-free lifecycle. The final four-leg review was ADMITTED_SAFE, and GitHub checks passed before merge.

Owner-reported validation (2026-09-21): Gemini CLI invocation succeeded in the reported environment.

Authenticated web verification across providers, Legacy Gemini CLI host-policy checks, fresh marketplace installation/discovery, and Claude-host shared-spec adoption remain separate verification steps. AGY page-body prefix loss remains a documented incomplete-evidence observation; its vendor cause is not established. Review success or a tool's success status does not prove that a fetched page body is complete.