4.3.2

• Wake reads an identity probe the way check recorded it under the Codex sandbox (issue #70). Node gives a child's stdout and stderr as a socket pair, and under the Codex sandbox a Node program writing to that socket through process.stdout prints nothing and still exits 0. So a probe such as npm --version read as "" in wake, which Codex runs inside the sandbox, and as "11.3.0" in sudus check, which writes .git and so runs outside it. The identities never matched, and wake named run REQ after every passing check. A probe now writes into a pipe that cat copies out, and its exit status still decides. A probe's value is unchanged outside the sandbox, so existing receipts stay current. Mechanism commands run as before: sudus check cannot run inside the Codex sandbox, which keeps .git read-only.