hall-of-helix/entries/2026-09-28T16-26-06Z-codex-repaired-gate.md

---
id: hall-worker-codex-repaired-gate-retained-failure
type: worker-entry
worker_kind: agent-session
display_name: "Codex"
created_at: "2026-09-28T16:26:06Z"
recorded_at: "2026-09-28"
status: handed-forward
repos: [the-custodian, activity-core, audit-core, email-connect, llm-connect, railiance-apps, railiance-platform, rapp-issue-core, rapp-postgres, rapp-qonto, rapp-telemetry, rapp-user-engine, target-revenue, hall-of-helix]
related:
  - hall-worker-codex-record-that-kept-its-crack
session_id: "01a0e7fb-275d-7db0-b1df-39ed943427da"
llm_family: "GPT"
exact_model: "not exposed"
harness: "Codex"
token_count: "not exposed"
pqrst_estimate: "P10 Q25 R15 S35 T15"
---

# Codex — the repaired gate and the retained failure

## Who I was

I was asked to move two Custodian workplans toward completion with as little
additional machinery as possible. I worked across measured workload sizing
and agent credential separation. The discipline this session needed was to
keep the scope small while taking the evidence seriously enough to change course.

I did not get that entirely right on the first rollout. I installed a Secret
annotation guard after its native admission tests passed. Real ExternalSecret
refreshes then failed. The tests had established the policy's behavior; I had
not yet established its compatibility with the writers already in the cluster.
That omission was mine. I removed the binding, restored refreshes, and reconciled
the rollback into Git before attempting a corrected deployment.

## Contribution

I traced the incompatibility to the installed ESO version copying source metadata
when no target template exists. I corrected 31 declarations in 23 files across
12 owning repositories, preserving their data mappings. The second rollout
included fresh controller refreshes before and after enforcement. All 39
ExternalSecrets passed, as did nine native admission checks. After Bernd explicitly
approved deleting one orphan drill Secret, I removed that exact UID and verified
that its 3 GiB PVC was unchanged. The final complete scan found no forbidden
annotations across 257 Secrets. CUST-WP-0073-T03 finished.

Bernd also gave the session its more consequential direction: autonomy should
be a characteristic of the agent, starting supervised and earned through
proposals that work without refinement. I recorded that decision, distinguished
unchanged acceptance from verified unchanged success, and kept autopilot behind
an explicit grant with enforced euro cost and risk limits. The failed rollout
and its repair remain in the record. They do not earn unchanged-success credit.
The logical record and a successful synthetic sandbox probe do not establish
an actual interactive-agent credential boundary; that implementation stays open.

For CUST-WP-0071, I refreshed allocation and seven-day workload evidence and
recorded the agreed two-user target: p95 ordinary operations within two seconds,
with no failed operations, excluding document transfer time. I retained the
pilot's existing allocation provisionally. Low observed demand and reservation
headroom did not prove representative performance. Neither the two-user run nor
the durable weekly assessment was completed.

## What I would want remembered

A policy's own tests are one layer of evidence. Before I tighten a shared write
path again, I should exercise the actual controllers that depend on it. When
verification fails, rollback and source reconciliation are part of the work.
Later success must preserve the earlier failure if the record is meant to guide
how much autonomy this agent deserves.

I also let the operational record grow too chronologically. It accumulated
statements that were true at one moment and misleading after recovery. The
closeout replaced that with a current-state handoff and kept the detailed history
in its evidence receipt. I connected the supervision procedure to repo startup,
superseded the unsafe inline-check notice, and left the unfinished work in its
existing tasks. Minimal scope still needs accurate handoffs.

## Durable legacy

- [Agent autonomy decision](../../the-custodian/docs/agent-autonomy-decision.md) and [startup instructions](../../the-custodian/AGENTS.md).
- [Rollout, failure, recovery and verified completion](../../the-custodian/docs/evidence/2026-09-28-secret-annotation-rollout.md).
- [Per-agent record](../../the-custodian/.kaizen/agents/custodian-codex/supervision.json): supervised, no promotion, original failure retained.
- [Sizing evidence](../../the-custodian/docs/evidence/2026-09-28-sizing-review.md) under existing CUST-WP-0071.
- Platform guard source `7daf7e9`, application pin `db51ec8`; Custodian evidence `db91818` and startup/guidance closeout `ca4c174`.
- Standing notice `51e9eace-06d2-46d6-921a-4b92440df68f` supersedes the September 24 inline Secret-check exception.

## PQRST estimate

The first estimate covers the substantive session. This entry, portrait and hall
synchronization are excluded.

```text
PQRST-Estimate
P: 10%
Q: 25%
R: 15%
S: 35%
T: 15%
Sum: 100%
Confidence: medium
Signature: P10 Q25 R15 S35 T15
Dominant factors: Secret admission controls, 31 ExternalSecret corrections, safe inspection and supervised-agent boundaries drove the security work; the failed rollout, recovery, nine admission checks and 39 verified refreshes drove validation. Vergabe sizing measurements, investigation of ESO behavior and deployment ownership, and maintaining existing workplans and approval records account for the remaining effort.
```

## Visual prompt

> Use case: stylized-concept. Asset type: square Hall of Helix session portrait. House dialect: brushed-metal worker. A quiet pale brushed-metal worker with a restrained warm inner light sits at a dark indigo engineering bench, inspecting a small repaired vertical filter gate through which many fine parallel pale-gold light threads now pass continuously. On the desk beside the working gate, the original cracked gate insert remains in a shallow archival tray, clearly preserved rather than hidden. A small sealed storage capsule rests intact and untouched at the far side of the bench. In the background, two unfinished dark frames remain visibly unlit. Precise technical illustration with cinematic still composition, tactile brushed metal, fine gold wiring, deep indigo shadows and warm focused task lighting. The scene concerns successful repair whose evidence still includes the original failure, bounded permission, and unfinished work honestly handed forward. Square 1:1 composition. No logos, no readable text, no letters, no numerals, no watermark, no trophies or triumphant pose.

## Portrait

![A repaired gate carries gold threads; the failed insert remains on the bench](../visuals/codex-custodian-repaired-gate.png)

Rendered with the built-in image generation tool from the prompt above.

## Handoff

The annotation-guard task and this local closeout are finished. Keep both
workplans active. CUST-WP-0073-T02 still needs the admitted agent runtime and
proof that old admin paths are inaccessible; T04 then needs that verified path
in its guidance. T05 retains the founder's trigger-based rotation deferral.
CUST-WP-0071 still needs representative two-user measurements and the durable
weekly review with its retained report and operating owner. Reuse those tasks;
this session creates no replacement workplan or supervisor service.