[agent] feat(pabcd): strengthen architect consultation and retain safe recovery

[thisisjun786]

Formal-P architect consultation could be omitted without a concrete proposal/reflection record. P now explicitly requires an architect proposal, a main-owned executable plan and reflection by the same architect before independent audit. P/A hooks and P-entry CLI output surface that sequence; existing fast paths and explicit user limits retain precedence.

CXC's existing delegation-selection policy is preserved. The canonical dev skill and B instructions match the upstream baseline. Neither executor-first nor main-direct implementation is introduced as a new default.

This consolidates and supersedes #177 and #179:

• Retains architect consultation and native V2 ciphertext preservation from feat(pabcd): make architect and executor delegation explicit #177; removes the added executor implementation policy.
• Retains evidence-based retirement guidance and reconciled task_failed recovery from [agent] fix(subagents): require progress evidence and support reconciled task recovery #179, including its resolved review fixes.
• Keeps managed recovery bounds: stopped-child identity and partial-work reconciliation are required, and only a returned main-direct permits reclaim. Cancellation, permission failures and ambiguous work retain their stop/reconcile behavior.

Closes #178.

Validation

• Corrected phase hook/CLI suite: 185 pass, including architect output and unchanged B/phase behavior.
• Build: 181 compiled files. Corrected full suite: 3177 total, 3103 pass, 74 conditional skips, zero failures (CODEXCLAW_SKIP_REPOMAP_SMOKE=1, isolated temporary directory).
• Gate, inventory with measured test count and whitespace checks: pass.
• Corrected compiled CLI/hook QA: five invocations each on source and installation. Installed recovery QA: 35 invocations.
• Independent review checks the corrected diff. Recovery/ciphertext runtime remains byte-identical to the reviewed combined implementation. Local/installed corrections and verified reapply patches are preserved.
• Policy remains agent-followed; these checks do not measure future model compliance.

Credits

Original contributions: thisisjun786 in #177 and #179. Their branches and history remain preserved. Implemented and reviewed with coding-agent assistance.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-15T17:59:23.085233Z	7c32804	New commits
🔒 Security Review	✅ Completed 2026-09-15T17:48:55.465996Z	df4802c	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.