[barelyworkingcode]

Closes #625

Epic #623 (eve track of barelyworkingcode/relay#585): show which agents run unsandboxed after a projectless adopt. Draft until the joint close task on barelyworkingcode/relay#585 marks it ready.

Children merged: #630 and #633 (#624), #634 (#625 pin).

🤖 Generated with Claude Code

[barelyworkingcode]

Verified: ff056b5 · repo-suite: 843 passed, 33 skipped (rerun; first run 1 failed G13.16, flake #635) · devboxverify: SUMMARY pass=48 fail=0 blocked=1 notrun=10 (blocked: outside-adopt-codex, no codex daemon on the box; stack with relay 74dc7d9) · real-app: PASS, the shared pass on barelyworkingcode/relay#587 · log: /tmp/c585/close2

[barelyworkingcode]

Evidence, restated from the children (#630 and #633 for #624, #634 for the #625 pin) and the verification on the epic head ff056b5:

Review: no blocking findings (#633 round 2, default model; #630 Sonnet; #634 trivial pin)
Journey: outside-adopt-unsandboxed PASS on the epic head ff056b5, stack e625 with relay 74dc7d9 (SUMMARY pass=48 fail=0 blocked=1 notrun=10; blocked: outside-adopt-codex, no codex daemon)
Harness weakening: none; outside-adopt and the other journeys are unchanged, the new journey is additive (#633)
Main harness vs head: main's devboxverify (952d1f0) against #624's head 0d92544 on stack e624m: SUMMARY pass=47 fail=0 blocked=1 notrun=10 (blocked: no codex daemon) (#633)
Break-and-restore: hiding the chip in AgentBoard turned all five @G6.109 specs red, and outside-adopt-unsandboxed FAIL "the managed row shows no Unsandboxed chip after the adopt"; green after the restore (#633)
Weakening reviewed: removed the Unfiled run row (duplicate not_registered coverage) and the NO_PROJECT assertions (unbuildable under the approved fakerelay rule); coverage moves to the barelyworkingcode/relay#587 devbox pass until barelyworkingcode/relay#591 (#630)

[barelyworkingcode]

Merged under merge-check: approved, target, verified, contract, evidence, owner, weakening. Relay merged first (barelyworkingcode/relay#593).