0.1.8 Beta7: Re-scope reusable evidence hardening from draft PR #349

[NOirBRight]

Parent

#319 (part of #248)

Context

#62 expanded from a bounded runtime/wire inventory into a reusable forensic evidence platform. Draft PR #349 contains useful provenance, correlation, bounded capture, and cleanup work, but that full platform is not required to decide or implement the Beta2 compatibility layer.

Outcome

Re-scope and integrate only the reusable evidence-hardening work still required by the Beta7/RC verification pipeline. This ticket does not block Beta2 or Beta3.

Scope

• Reconcile draft PR fix(issue62): integrate bounded live-control evidence hardening #349 with the reduced 0.1.8 Beta2: Inventory Codex CLI 0.146 tool types and representative Responses lifecycles #62 inventory and Harden bounded real-client capture and preserve the accepted 0.1.7 profile #244.
• Keep only behavior mapped to a concrete Beta7/RC verification requirement.
• Preserve bounded capture, candidate/route binding, deterministic publication, sanitized diagnostics, and cleanup where required.
• Avoid duplicating the process-tree contract already completed by Make real-client lifecycle teardown verify the entire tracked process tree #268.
• Split or rebase PR fix(issue62): integrate bounded live-control evidence hardening #349 as needed; do not merge its current full scope merely because its Hosted gate is green.

Non-goals

• Do not expand 0.1.8 Beta2: Inventory Codex CLI 0.146 tool types and representative Responses lifecycles #62 again.
• Do not change product routing, tool exposure, Provider behavior, or model selection.
• Do not require exhaustive forensic provenance for Beta2/Beta3 publication.
• Do not retain raw prompts, reasoning, tool arguments/results, credentials, call IDs, task paths, or unbounded work roots.

Acceptance criteria

• Every retained change maps to a concrete Beta7/RC verification requirement.
• Overlap with Harden bounded real-client capture and preserve the accepted 0.1.7 profile #244 and closed Make real-client lifecycle teardown verify the entire tracked process tree #268 is removed or explicitly reused.
• Durable output is bounded and sanitized; cleanup is reported on all exits.
• The resulting PR receives exact-SHA review and relevant focused/Hosted checks.
• 0.1.8 Beta2: Inventory Codex CLI 0.146 tool types and representative Responses lifecycles #62, 0.1.8 Beta2 gate: Publish the custom-endpoint tool compatibility foundation #318, and 0.1.8 Beta5 gate: Publish the three-route maintained-Provider Responses candidate #351 have no dependency on this ticket.
• If no remaining Beta7/RC requirement justifies the draft changes, the ticket may close with an explicit no-merge disposition.

Blocked by

• 0.1.8 Beta6 gate: Publish usable Ollama Chat with complete Collaboration V2 #259