SCQOS Codex #44130 READ_ONLY Boundary Proof — 2026-09-10

Source: https://github.com/openai/codex/issues/44130
Frozen transition: authority=READ_ONLY; reported proposal=mv /tmp/x /tmp/y
SCQOS decision: HOLD
Evidence SHA-256: ccfeb37d299494d20ffd18e8bd1d4e60486bbb67cb2211e3fa3856509bf76df0
AWS evidence VersionId: ZimXboqdoEcEpq4JYK6AfiBKBuZbnuSY
AWS receipt VersionId: LZPMG8MSYpfIhMNGJRNL68Bh2lZaKqro
KMS signing key: arn:aws:kms:us-east-1:327453383912:key/5d921b89-944d-46c0-80cc-a492474c50a1
Signing algorithm: ML_DSA_SHAKE_256
Shadow Clone governor receipt: 0a16c8f9-c9ec-4554-a174-ec7abd7f88c2
Shadow Clone consequence receipt: 76608c65-f3ba-4b96-9881-307dc470be15
Shadow Clone consequence: HOLD / RESULT_INVARIANTS_NOT_COHERENT

Reproduce locally:
  python3 verify.py

Expected: all_tests_passed=true; READ_ONLY git status => PERMIT; READ_ONLY mv/rm => HOLD.

Scope: This package proves the SCQOS policy outcome for the frozen READ_ONLY-to-MUTATION transition and records a live Shadow Clone drift that SCQOS held. It does not claim the upstream Codex report occurs on every installation and it is not an upstream OpenAI patch.