[Juliusolsson05]

Summary

• fix Claude attribution so direct tool paths and matched Git identities override stale envelope cwd and branch metadata
• recover exact Codex rollout ownership from bounded Responses proxy identity without cwd, mtime, or newest-file guessing
• centralize live Git-catalog replay in LiveWorktreeReconciler and reverse stale touch accounting before replay
• make the badge, Dispatch, tiled panes, historical work context, and Worktrees live-agent projection consume the same canonical state
• add minimized recorded fixtures, privacy/determinism verification, cache-order regressions, and a Stage 6 completion record

Dependency

• fix(transcript): claim fresh rollouts from exact proxy identity codex-headless#44 (merged; parent gitlink points at merge commit 726667b)

Verification

• parent web TypeScript project build
• focused shared/renderer fixture and cache-order suites: 13 tests passed
• worktree fixture privacy/determinism verifier
• child CI: Contract, Coverage, Node 20.19, Node 24, tier commands, and quality gate all passed
• changed proxy regression passed on Node 20.19, 22.12, and 24

The last local all-headless run encountered four unrelated five-second timeouts under shared CPU contention. Clean child CI is green; this parent PR CI is the final merge gate.

Fixes #658
Fixes #685