Bump Codex package to 0.6.1

Author: Cipher-85

.codex/README.md

@@ -12,7 +12,10 @@ Current package version:
   explicit publish operations.
 
 Current status:
-- The package version is `v0.6.0`.
+- The package version is `v0.6.1`.
+- `v0.6.1` hardens `$handoff` push routing, verifies the authenticated GitHub
+  destination and repository permission in the same turn, and fails closed on
+  policy denial without alternate-command retries.
 - `v0.6.0` adds verified CLI/desktop custom-role activation guidance, raw
   parent/child/hook evidence validation, V2 no-fork enforcement, and
   remote-aware fail-closed release checks.

.codex/VERSION

@@ -1 +1 @@
-0.6.0
+0.6.1

CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## v0.6.1 - 2026-07-16
+
+- Hardened `$handoff` push routing so existing-upstream branches use plain
+  `git push`, while only branches without an upstream use
+  `git push -u origin <branch>`.
+- Added same-turn GitHub account, destination, and repository-permission checks
+  before handoff pushes, avoiding false authentication conclusions from
+  network-restricted sandbox failures.
+- Scoped push escalation to `["git", "push"]` and made policy denials fail
+  closed without alternate-command retries or workarounds.
+
 ## v0.6.0 - 2026-07-12
 
 - Made `audit smoke-interactive` report an explicit skipped result instead of a

README.md

@@ -4,7 +4,7 @@ Codex Game Studios turns a game repository into a Codex-native indie studio
 workflow: 49 declared role profiles, 77 repo-local skills, verification-first handoffs, and
 Godot-first production guidance for small teams building playable slices.
 
-Current package version: `0.6.0`.
+Current package version: `0.6.1`.
 
 This project is an unofficial Codex-native port of
 [Donchitos/Claude-Code-Game-Studios](https://github.com/Donchitos/Claude-Code-Game-Studios),
@@ -29,7 +29,16 @@ surfaces with Codex-native agents, skills, hooks, rules, and install behavior.
 
 ## Current Status
 
-The current release line is `v0.6.0`. It includes:
+The current release line is `v0.6.1`. It includes:
+
+- Upstream-aware `$handoff` push routing: existing-upstream branches use plain
+  `git push`, while only branches without an upstream set one through origin.
+- Same-turn GitHub authentication, destination, and repository-permission
+  verification before a handoff push is attempted.
+- Scoped `git push` approval requests with fail-closed policy-denial handling
+  and no alternate-command retries or workarounds.
+
+The `v0.6.0` release also includes:
 
 - Verified custom-role activation through `gpt-5.5` V1 and the experimental
   Sol V2 user workaround in both CLI and desktop, with `fork_turns: "none"`

production/test-evidence/latest.md

@@ -1,41 +1,38 @@
 # Latest Test Evidence
 
-Date: 2026-07-07
+Date: 2026-07-16
 
-Scope: CCGS closeout-boundary fix on top of role-agent delegation consent
-alignment.
+Scope: Codex Game Studios `v0.6.1` patch release for hardened `$handoff`
+push routing and approval handling.
 
 ## Commands Run
 
 ```bash
-python3 .codex/lib/validate_manifest.py
-python3 .codex/lib/validate_runtime.py --kind docs
-python3 .codex/lib/validate_runtime.py --kind skills
-python3 .codex/lib/validate_manifest.py
-python3 .codex/lib/validate_runtime.py --kind docs
-python3 .codex/lib/validate_runtime.py --kind skills
-./.codex/audit.sh all
-rg -n "Task subagent" AGENTS.md .codex/docs .agents/skills docs/COLLABORATIVE-DESIGN-PRINCIPLE.md "CCGS Skill Testing Framework/skills"
-rg -n -- "--review lean" .agents/skills/design-review/SKILL.md "CCGS Skill Testing Framework/skills/review/design-review.md"
-rg -n "(Next action:|Recommended Next Steps|closing widget|closeout|what next|next steps).*(Self-Check|registry scan|candidate discovery|readback|context gathering|validation summary)|(Self-Check|registry scan|candidate discovery|readback|context gathering|validation summary).*(Next action:|Recommended Next Steps|closing widget|closeout|what next|next steps)" .agents/skills AGENTS.md .codex/docs/session-continuity.md
+./.codex/release.sh check
+./.codex/audit.sh all --root /Users/yongatron/Development/Codex-Game-Studios
+git diff --check
+python3 .codex/lib/validate_manifest.py --root /Users/yongatron/Development/Codex-Game-Studios
 ```
 
 ## Result
 
-- Baseline `python3 .codex/lib/validate_manifest.py`: pass
-- Baseline `python3 .codex/lib/validate_runtime.py --kind docs`: pass
-- Baseline `python3 .codex/lib/validate_runtime.py --kind skills`: pass
-- Final `python3 .codex/lib/validate_manifest.py`: pass
-- Final `python3 .codex/lib/validate_runtime.py --kind docs`: pass
-- Final `python3 .codex/lib/validate_runtime.py --kind skills`: pass
-- `.codex/audit.sh all`: pass
-- `Task subagent` grep in active docs, skills, and specs: no matches
-- `--review lean` grep in `$design-review` and its spec: no matches
-- Closeout/internal-read-only phase grep: no matches
+- `release.sh check`: pass with no errors or warnings
+- `audit.sh all`: pass
+  - manifest: pass
+  - runtime: pass
+  - skills: pass
+  - agents: pass
+  - hooks: pass
+  - config: pass
+  - coexistence: pass
+  - smoke-headless: pass
+- `git diff --check`: pass
+- Standalone manifest validation: pass
 
 ## Notes
 
 - Verification ran in `/Users/yongatron/Development/Codex-Game-Studios`.
-- Runtime files, skills, manifest, hooks, config, coexistence checks, and
-  headless smoke validation passed for the closeout-boundary fix.
-- No release check, version bump, install, publish, commit, or push was run.
+- Release validation established the previous published baseline from origin's
+  `codex-v0.6.0` tag and validated the installable diff for `v0.6.1`.
+- The release change is limited to the already-reviewed `$handoff` hardening,
+  version metadata, release notes, README release summaries, and this evidence.