fix: isolate rein results and normalize manager startup failures

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb

workplans/ADHOC-2026-09-06.md

@@ -0,0 +1,51 @@
+---
+id: GLAS-WP-ADHOC-2026-09-06
+type: workplan
+title: "Repository review: session isolation and startup failure reporting"
+domain: infotech
+repo: glas-harness
+status: finished
+owner: codex
+topic_slug: repository-review
+created: "2026-09-06"
+updated: "2026-09-06"
+---
+
+# Repository review
+
+The working tree was clean at review start. GLAS-WP-0012 is the only unfinished
+workplan. Its real-key proof still waits on owner activation and runtime
+acceptance; the latest owner update is recorded there. These bounded local
+fixes do not change profile readiness. No residuals from these fixes.
+
+## Isolate reusable rein session results
+
+```task
+id: ADHOC-2026-09-06-T01
+status: done
+priority: medium
+```
+
+Both adapters stored the parsed CLI response on the adapter instance. When two
+sessions interleaved, ending the first used the second session's outcome,
+model and usage. Store the response in its session and read it from there.
+The regression test reproduces the mixed outcome in both adapters before the
+fix and validates distinct outcomes/model/usage afterwards.
+
+## Normalize sandbox manager initialization failure
+
+```task
+id: ADHOC-2026-09-06-T02
+status: done
+priority: medium
+```
+
+Move default manager construction inside the sandbox-create error boundary.
+Initialization failure now returns a failed GatewayResult with sandbox_create
+stage and no sandbox id. Direct callers retain the error; Hub evidence omits
+its raw contents. The regression test failed with an escaping exception before
+the fix and passes afterwards.
+
+Validation: full suite 104 passed; profile catalog validation passed with
+existing readiness unchanged. Reviewed credential owner update and refreshed
+the proposed policy reference in docs/anthropic-workload-key.md.