Merge origin/master into codex/sandbox-policy-context

examples/headless-agent/subagent-inheritance.cordis.snapshot.yml

@@ -16,11 +16,6 @@
 - id: replay
   name: '@deepseek-ai/dsh-llm-replay'
 
-- id: bash
-  name: '@deepseek-ai/dsh-bash-local'
-  config:
-    timeoutMs: 60000
-
 # The confining filesystem stack: the wide deployment default lives on the
 # shared policy home; the seeded parent's read-only override must beat it
 # INSIDE the child for the scenario to deny.
@@ -39,6 +34,9 @@
 - id: tool-fs
   name: '@deepseek-ai/dsh-tool-fs'
 
+# This scenario probes filesystem confinement only, so the bash stack is absent:
+# without it the bundle's `toolBash: false` is required, because `tool-bash` would
+# otherwise wait forever for a `bash` executor this tree never mounts.
 - id: agent
   name: '@deepseek-ai/dsh-agent-spine-demo'
   config:
@@ -46,6 +44,7 @@
     workspaceContext: false
     skills:
       enabled: false
+    toolBash: false
     toolTasks: false
     goals: false
 

examples/headless-agent/tests/fixtures/telemetry-otel.cordis.yml

@@ -8,6 +8,9 @@
 - id: telemetry-redact-rule
   name: './telemetry-redact-rule.ts'
 
+- id: subprocess
+  name: '@deepseek-ai/dsh-subprocess-local'
+
 - id: bash
   name: '@deepseek-ai/dsh-bash-local'