test(steward): qualify the new shipped model defaults

Signed-off-by: huangruiteng <huangrt01@163.com>

Author: huangruiteng

docs/architecture/rfcs/capable-manager-semantic-handoff-v0.md

@@ -107,7 +107,7 @@ The baseline already has substantial reusable machinery:
 
 | Existing owner | Source / fact | Consequence |
 | --- | --- | --- |
-| Manager identity/config | `loopx/chat_manager.py`: `open_manager_session`, `manager_workspace`, `manager_model_config` | Stable global role, audience-derived private workspace, `resume_latest`; default Codex model is `gpt-6-astra` / `high` |
+| Manager identity/config | `loopx/chat_manager.py`: `open_manager_session`, `manager_workspace`, `manager_model_config` | Stable global role, audience-derived private workspace, `resume_latest`; default Codex model is `gpt-6.1-sol` / `xhigh` |
 | Host execution | `loopx/chat_agent.py`: `_turn_prompt`, `CodexChatAgentSession.start`; `loopx/chat_runtime.py`: adapter creation/restoration | Codex app-server start/resume exists. Planning uses read-only sandbox and never approvals; only the manager read dynamic tool is added by this path |
 | Manager behavioral restriction | `MANAGER_AGENT_OBJECTIVE` and the planning prompt | Shell/arbitrary repository reads and mutations are restricted; outside intent delegation, durable changes become preview/apply proposals |
 | Session restoration | `loopx/chat_runtime.py` | Saved upstream identity is resumed when compatible; context-version and audience changes can force a new thread. This is not evidence that every deployed request resumes successfully |

docs/architecture/rfcs/capable-manager-semantic-handoff-v0.zh-CN.md

@@ -83,7 +83,7 @@ lease 转交或 shared-intent 修改权限。这是 R3 的有界切片，不代
 
 | 现有 owner | 源码 / 事实 | 含义 |
 | --- | --- | --- |
-| 管家身份与配置 | `loopx/chat_manager.py`：`open_manager_session`、`manager_workspace`、`manager_model_config` | 稳定全局角色、按受众派生的私人工作区、`resume_latest`；Codex 默认 `gpt-6-astra` / `high` |
+| 管家身份与配置 | `loopx/chat_manager.py`：`open_manager_session`、`manager_workspace`、`manager_model_config` | 稳定全局角色、按受众派生的私人工作区、`resume_latest`；Codex 默认 `gpt-6.1-sol` / `xhigh` |
 | 宿主执行 | `loopx/chat_agent.py`：`_turn_prompt`、`CodexChatAgentSession.start`；`loopx/chat_runtime.py` 的 adapter 创建与恢复 | 已有 app-server start/resume；planning 使用 read-only sandbox、never approval；该路径仅额外注入 manager read 动态工具 |
 | 管家行为限制 | `MANAGER_AGENT_OBJECTIVE` 和 planning prompt | 限制 shell、任意仓库阅读和写操作；除意图委托之外，持久修改走 preview/apply 提案 |
 | 会话恢复 | `loopx/chat_runtime.py` | 兼容时恢复保存的 upstream 身份；上下文版本、受众变化可迫使新建线程。不能据此宣称每次线上请求都成功 resume |

docs/reference/protocols/manager-evidence-and-continuity-v0.md

@@ -82,7 +82,7 @@ never the inventory. Normal manager questions no longer silently use a limited
 frontend projection; explicitly choosing status-only still uses that projection.
 
 The manager channel's model and reasoning effort follow its executor. On the
-interactive CLI endpoint the defaults are `gpt-6-astra` with `high` reasoning; on
+interactive CLI endpoint the defaults are `gpt-6.1-sol` with `xhigh` reasoning; on
 the managed host they are the managed execution profile
 (`deepseek-official` / `deepseek-flash` / `high`). The machine's
 `steward_executor` machine configuration decides the executor, the model and the

examples/loopx-steward-channel-binding-smoke.py

@@ -79,7 +79,7 @@ def _assert_the_shipped_default_ignores_the_credential() -> dict[str, object]:
         "the one shipped decision must be named, and it is not a credential branch",
     )
     _assert(
-        without_credential["model"] == with_credential["model"] == "gpt-6-astra"
+        without_credential["model"] == with_credential["model"] == "gpt-6.1-sol"
         and with_credential["model_source"] == MANAGER_MODEL_SOURCE_VENDOR_DEFAULT
         and with_credential["execution_profile"] is None,
         "a credential must not hand the CLI endpoint a managed model or profile",
@@ -98,7 +98,7 @@ def _assert_the_shipped_default_ignores_the_credential() -> dict[str, object]:
         manager_model_config(
             {CREDENTIAL_ENV: CREDENTIAL_VALUE, "LOOPX_MANAGER_MODEL": "fixture-model"}
         )
-        == {"model": "fixture-model", "reasoning_effort": "high"},
+        == {"model": "fixture-model", "reasoning_effort": "xhigh"},
         "an explicit model override must win over the shipped default",
     )
     return {