# T36 Codex Driver Validation

> - Task: T36 — Implement Codex Driver - Requirements: VES-MDL-001…005, VES-HOF-004, VES-TST-005/008 - Commit target: feat(drivers): add codex adapter - Focused evidence: 25 cases (19 contract, 6 integration) - Spec deviations: none

Source: https://github.com/accd/verchestra/blob/main/docs/qualification/t36-validation.md
Content digest: `sha256:fd23f23ff7fbeb9c8c521fd67e8255d1dfb38ccb9bd1e918e65bd9e10530c194`

## Scope

- Task: T36 — Implement Codex Driver
- Requirements: VES-MDL-001…005, VES-HOF-004, VES-TST-005/008
- Commit target: `feat(drivers): add codex adapter`
- Focused evidence: 25 cases (19 contract, 6 integration)
- Spec deviations: none

T36 adapts the qualified Codex app-server JSONL protocol to the common Driver port. It requires a compatible CLI before resolution/spawn, selects the exact Passport model from the live catalog, creates only ephemeral read-only threads, exposes only declared dynamic tools, declines built-in effects, streams common events, and cancels through protocol interrupt before process-tree termination.

## Deterministic gates

| Command | Result |
| --- | --- |
| `node --test tests/contract/codex-driver.test.mjs tests/integration/codex-driver-lifecycle.test.mjs` | PASS — 25 passed, 0 failed/skipped |
| `node scripts/gate.mjs full` | PASS — format, lint, typecheck, 1,418 unit, 227 contract, 173 integration, 16 E2E, and 49 fault cases |

## Adequacy matrix

| Criterion | Evidence | Covered |
| --- | --- | --- |
| Version/capability preflight | Compatible, unsupported, unavailable, and pre-spawn integration cases | Yes |
| Local locked transport | Stdio arguments and JSONL handshake cases | Yes |
| Read-only ephemeral authority | Thread params and built-in approval denial | Yes |
| Exact model identity | Passport mutations and missing live-catalog model | Yes |
| Dynamic tools | Name/schema-digest binding, declared request, undeclared rejection | Yes |
| Stream/usage | Ordered success, malformed, provider error, output bound | Yes |
| Cancellation | Pre-abort plus interrupt-before-tree-kill integration | Yes |
| Privacy | Ambient credential/thread exclusion, redaction, portable lifecycle | Yes |
| Local lifecycle | Idempotent close and foreign-instance rejection | Yes |
| Minimum floor | 25 focused cases versus required 18 | Yes |

## Non-shallow checks

- Prompt exists only inside `turn/start` JSONL and never argv/session references.
- Runtime selection comes from `model/list`; a requested but absent model fails before thread creation.
- Thread authority is always ephemeral, read-only, untrusted, and human-reviewed.
- Undeclared dynamic tool calls terminate; declared calls emit a request but receive no inline execution authority.
- Command/file approval requests are explicitly declined and evidenced.
- Valid `turn/completed` followed by controller shutdown is not misclassified as provider failure.
- Cancellation ordering proves `turn/interrupt` precedes bounded process-tree termination.
- Thread/turn IDs, credentials, and secret-bearing content never enter portable outputs.

## Verdict

PASS. Tests preceded implementation, the common Driver contract is preserved, the T04-qualified app-server behavior is reused, the focused floor is exceeded, and the complete repository gate passes.