Persist Codex alpha.19 operator thread handoff

artifacts/github/social-candidates/openai-codex-rust-v0-140-0-alpha-19-operator-thread.json

@@ -0,0 +1,97 @@
+{
+  "schema": "social_candidate/v1",
+  "slug": "openai-codex-rust-v0-140-0-alpha-19-operator-thread",
+  "repo": "openai/codex",
+  "channel": "x",
+  "target_account": "decodexspace",
+  "mode": "thread",
+  "priority": "high",
+  "audience": "Codex operators, plugin authors, and remote-execution integrators tracking prerelease compatibility changes",
+  "candidate_text": [
+    "Codex 0.140.0-alpha.19 is a small operator checkpoint.\n\nalpha.18 -> alpha.19 has 4 commits. Reviewed impact is concentrated in exec-server cwd URI handling and dual App/MCP plugin routing.",
+    "Exec-server cwd changed: `process/start.cwd` is now a `PathUri`. Remote exec and MCP launcher clients should send target-native `file:` cwd URIs and handle non-native cwd rejection.\n\nPR: https://github.com/openai/codex/pull/28032",
+    "Plugin routing changed: for ChatGPT/SIWC auth, Codex hides only the MCP server whose name matches an App declaration. Non-conflicting MCP servers stay available.\n\nPR: https://github.com/openai/codex/pull/27607",
+    "Caveat: the alpha.19 release body is sparse. Windows ARM64 packaging-on-x64 is release infrastructure, not runtime behavior.\n\nCompare/source: https://github.com/openai/codex/compare/rust-v0.140.0-alpha.18...rust-v0.140.0-alpha.19"
+  ],
+  "source_refs": {
+    "release_deltas": [
+      "site/src/content/release-deltas/openai-codex-latest.json"
+    ],
+    "upstream_reviews": [
+      "artifacts/github/reviews/openai-codex-pr-28001.review.json",
+      "artifacts/github/reviews/openai-codex-pr-28032.review.json",
+      "artifacts/github/reviews/openai-codex-pr-27607.review.json"
+    ],
+    "upstream_impacts": [
+      "artifacts/github/impact/openai-codex-pr-28001.json",
+      "artifacts/github/impact/openai-codex-pr-28032.json",
+      "artifacts/github/impact/openai-codex-pr-27607.json"
+    ],
+    "urls": [
+      "https://developers.openai.com/codex/changelog",
+      "https://github.com/openai/codex/releases/tag/rust-v0.140.0-alpha.18",
+      "https://github.com/openai/codex/releases/tag/rust-v0.140.0-alpha.19",
+      "https://github.com/openai/codex/compare/rust-v0.140.0-alpha.18...rust-v0.140.0-alpha.19",
+      "https://github.com/openai/codex/pull/28001",
+      "https://github.com/openai/codex/pull/28032",
+      "https://github.com/openai/codex/pull/27607"
+    ]
+  },
+  "evidence_notes": [
+    "GitHub release metadata shows rust-v0.140.0-alpha.19 was published at 2026-06-14T02:03:02Z with a sparse release body: Release 0.140.0-alpha.19.",
+    "The correct public prerelease comparison for this checkpoint is rust-v0.140.0-alpha.18 -> rust-v0.140.0-alpha.19; alpha.19 is not the first prerelease after stable rust-v0.139.0.",
+    "GitHub compare metadata for alpha.18 -> alpha.19 reports status=diverged, 4 ahead commits, 1 behind commit, and 4 total commits.",
+    "The compare commit titles map the adjacent window to Windows ARM64 packaging on x64 runners (#28001), exec-server cwd as PathUri (#28032), plugin MCP dedupe by App declaration name (#27607), and the alpha.19 release commit.",
+    "Checked Decodex review and impact artifacts classify #28032 as a high-confidence exec-server cwd protocol compatibility risk for remote executor and MCP launcher clients.",
+    "Checked Decodex review and impact artifacts classify #27607 as a high-confidence plugin App/MCP routing compatibility risk with operator-impact publisher value.",
+    "Checked Decodex review and impact artifacts classify #28001 as release packaging infrastructure with no direct runtime behavior change and no standalone publisher angle.",
+    "The checked release_delta/v1 records stable rust-v0.139.0 -> latest prerelease rust-v0.140.0-alpha.19 with 197 ahead commits and no tracked signal slugs; this social handoff uses the adjacent prerelease lineage required for public prerelease copy.",
+    "Official Codex changelog readback for this run shows Codex app 26.609 on 2026-06-11 as the newest official app entry; rust-v0.140.0-alpha.19 is a GitHub prerelease checkpoint, not an official changelog entry."
+  ],
+  "claims": [
+    {
+      "text": "rust-v0.140.0-alpha.19 is a real OpenAI Codex prerelease checkpoint.",
+      "evidence": "https://github.com/openai/codex/releases/tag/rust-v0.140.0-alpha.19",
+      "confidence": "confirmed"
+    },
+    {
+      "text": "The correct public prerelease comparison for this checkpoint is rust-v0.140.0-alpha.18 -> rust-v0.140.0-alpha.19.",
+      "evidence": "https://github.com/openai/codex/compare/rust-v0.140.0-alpha.18...rust-v0.140.0-alpha.19",
+      "confidence": "confirmed"
+    },
+    {
+      "text": "The alpha.19 window includes a source-backed exec-server cwd PathUri compatibility change for remote executor and MCP launcher clients.",
+      "evidence": "artifacts/github/reviews/openai-codex-pr-28032.review.json",
+      "confidence": "confirmed"
+    },
+    {
+      "text": "The alpha.19 window includes a source-backed plugin App/MCP routing change where matching App/MCP names prefer the App route while non-conflicting MCP servers remain available.",
+      "evidence": "artifacts/github/reviews/openai-codex-pr-27607.review.json",
+      "confidence": "confirmed"
+    },
+    {
+      "text": "The Windows ARM64 packaging-on-x64 change in the alpha.19 window is release infrastructure rather than direct runtime behavior.",
+      "evidence": "artifacts/github/reviews/openai-codex-pr-28001.review.json",
+      "confidence": "confirmed"
+    }
+  ],
+  "decision": {
+    "worthiness": "publish",
+    "reason": "The alpha.19 adjacent prerelease window now has source-backed operator-impact evidence for exec-server cwd URI handling and dual App/MCP plugin routing, with release-infrastructure caveats separated.",
+    "idempotency_key": "x:decodexspace:openai-codex-rust-v0-140-0-alpha-19:alpha18-alpha19:thread"
+  },
+  "caveats": [
+    "This is a prerelease thread handoff, not a stable release claim.",
+    "No previous live and quote-eligible @decodexspace 0.140 prerelease post exists; earlier 0.140 prereleases in this checkout are recorded as defer / needs_upstream_analysis checkpoints.",
+    "Do not compare alpha.19 against stable 0.139.0 for public prerelease copy; the adjacent prerelease lineage is alpha.18 -> alpha.19 because alpha.19 is not the first prerelease after stable.",
+    "Do not imply every exec-server path-like field moved to PathUri; the reviewed #28032 evidence is scoped to cwd handling.",
+    "Do not present #27607 as removal of plugin MCP support; the reviewed evidence says non-conflicting MCP servers remain available.",
+    "Media caveat: no generated image is attached by this downstream artifact-consumer run. If media is useful, decodex-x-publisher should generate and verify candidate-specific decodex_signal_card media and fail closed if upload or readback is unreliable."
+  ],
+  "next_steps": [
+    "Hand this publishable alpha.19 thread candidate to decodex-x-publisher.",
+    "Before posting, verify @decodexspace account state, daily cap, duplicate/idempotency state, pending publication PRs, and whether candidate-specific media adds reader value.",
+    "Do not publish from this release checkpoint automation.",
+    "Use adjacent prerelease-to-prerelease lineage for future 0.140 prereleases after alpha.19."
+  ]
+}