[gpazo]

Cold checkpoints with the official Codex runtime refused built-in Bedrock providers and the cloud launcher's relative binary path. This change verifies Bedrock recovery offline and pins the installed official binary at trusted worker startup. Codex 0.164.0 remains unmodified.

The verifier keeps network and credentials unavailable, checks native history, and refuses configuration warnings. The egress proof accepts an unreachable-network result only with complete kernel evidence of a loopback-only namespace. The x64 CI fixture installs the cloud launch policy used by the cold checkpoint test.

Cold AWS workers exceeded the ordinary 30-second protocol deadline before their first response. Only the credential-free managed preflight gets a 120-second initialization ceiling. Policy verification, the sandbox canary, other RPC deadlines, and cancellation remain unchanged. Startup telemetry contains fixed labels and elapsed time.

Validation passed on 233b814:

• npm run check, targeted startup and cancellation regressions, and all CI jobs, including ARM and x64 native cold recovery.
• Real AWS tests preserved native history, modified inputs, setup state, and sandbox identity across two cold worker replacements. An uncheckpointed crash correctly reset the workspace.
• Both live egress modes passed, covering default guest denial, enabled private Bedrock TLS, and public TCP denial.
• Before and after provenance matched the reviewed source, official artifact, deployed image, and all six workers. Independent review reproduced the receipt checks.
• Installation took 10 minutes 24 seconds. Teardown took 7 minutes 3 seconds. The cleanup audit found empty Terraform state, no active workers or runtime credentials, removed resources, and the disabled KMS key pending deletion.

The newer main documentation commit is included. Earlier failed attempts remain recorded as failures and were separately cleaned up.