One-off worker verification passed before this flip (2026-10-26): production-shaped docker task (apparmor=docker-codex, pids-limit 512, tenant isolation, egress proxy 8888, --docker-runtime runsc) completed in 60s with gpt-6.1-sol, worktree quadruple + proof verified, template and tenant repo copies clean. README now states the production state.