diff --git a/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml b/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml
index fb614a5372..554fb620fd 100644
--- a/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml
+++ b/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml
@@ -16,11 +16,6 @@
 - id: replay
   name: '@deepseek-ai/dsh-llm-replay'
 
-- id: bash
-  name: '@deepseek-ai/dsh-bash-local'
-  config:
-    timeoutMs: 60000
-
 # The confining filesystem stack: the wide deployment default lives on the
 # shared policy home; the seeded parent's read-only override must beat it
 # INSIDE the child for the scenario to deny.
@@ -39,6 +34,9 @@
 - id: tool-fs
   name: '@deepseek-ai/dsh-tool-fs'
 
+# This scenario probes filesystem confinement only, so the bash stack is absent:
+# without it the bundle's `toolBash: false` is required, because `tool-bash` would
+# otherwise wait forever for a `bash` executor this tree never mounts.
 - id: agent
   name: '@deepseek-ai/dsh-agent-spine-demo'
   config:
@@ -46,6 +44,7 @@
     workspaceContext: false
     skills:
       enabled: false
+    toolBash: false
     toolTasks: false
     goals: false