ISSUE 23525 — SANITIZED SERVER-ONLY EVIDENCE

Scope: evidence capture only. No checkout changes, tests, browser use, server launches, PR actions or watchers performed by this evidence-capture step. Auditor-supplied render/fixture proof matrix is empty; no visual evidence is required.

Comparison supplied by primary: base 22840ab943 versus head a9867483cf. Primary reports real browser workflow before and after. This step independently inspects only the two named provider logs and three named native Codex rollout files. Primary's commit attribution and browser interactions are not independently re-enacted here. Model and prompt equality are directly confirmed in both provider logs: gpt-6.1-sol, effort xhigh (Extra High), serviceTier default. Native after rollouts record CLI 0.163.0.

RESULT
Before: injected instruction required delegate_task for inherited options. Full before provider log has 3 distinct delegate_task call IDs: 2 completed initial calls and 1 failed retry using the same contracts clientRequestId. Do not describe this as three independent children. Actual prompt requests two parallel read-only package summaries and requests no child-specific model/options.
After: injected instruction explicitly permits Codex native inheritance. Full captured after provider log has zero delegate_task call IDs and one orchestrator_capabilities call. Parent native rollout records two collaboration.spawn_agent calls, followed by wait_agent and recovery followup_task calls. Spawn arguments contain task_name and an opaque message, without model, role, or effort overrides; opaque messages are omitted from public evidence.
Children: both native metadata records identify the exact parent and named native children. Each records model gpt-6.1-sol and effort xhigh, then a final package summary and task_complete. Parent records a final combined answer and task_complete.

LIMITATIONS / NOT ESTABLISHED
Parent serviceTier default is directly observed, as is the capabilities inherited serviceTier default. Child rollout turn contexts do not serialize a service tier field. Null entries in the extracted subset mean absent metadata, not a measured default. Thus native child serviceTier default inheritance is NOT independently established by these artifacts. No priority-tier, other provider, explicit override, role/default override, or worktree-isolation claim is made. No latency/performance conclusion or uninterrupted end-to-end success claim is supported.
Red/green automated-test transcripts were not found in the named evidence directory or matching issue-23525 /tmp artifact search. No primary tester summary was available at capture time; no test pass/fail claim is made, and tests were not rerun against the active runtime.

FRICTION
Primary reports the workflow restarted because test/check Vite temporary files fell under watched paths. Native parent rollout directly confirms restart/cancellation notices at 20:14:11.956Z and 20:15:10.321Z, with followup_task resumptions after the first notice. Both children completed around 20:14:46–47Z; parent combined answer completed 20:15:24Z. The watcher root cause is primary-reported, not independently diagnosed here. Completion evidence reflects recovery, not a clean uninterrupted run.
This capture encountered one harmless parser mismatch (timestamp-prefixed provider logs are not plain JSONL), corrected by parsing the JSON suffix. No runtime state was modified.

CONTENTS / PRIVACY
before-strengthened.txt and after-strengthened.txt contain allowlisted actual turn settings, actual prompt, relevant injected instructions, capabilities inheritance subset, delegate call details and deduplicated counts, with original source line references.
native-strengthened.txt contains allowlisted native metadata, turn contexts, native operation names/arguments with opaque messages omitted, restart notices, final answers and completion events.
source-manifest.json records SHA-256 and byte lengths of the five source snapshots. Sources can be growing runtime logs; hashes identify capture snapshots, not immutable session archives.
Only these synthetic read-only package-summary sessions were read. Public proof excludes raw log dumps, credentials/configuration, general system instructions, unrelated sessions, and opaque encrypted tool messages. Original short before.txt/after.txt are superseded by the strengthened excerpts.