docs(track-a): refresh hybrid runner and persistent-session routing

[blakinio]

Supersedes

Replaces PR #342 because main advanced through merged closeout PR #341 after #342 had already passed exact-head CI/governance audits. Repository strict-up-to-date policy requires a clean restack.

This branch is rebuilt directly from main@6c06d4daf83c03f2f9d22b4e2631caef0bb489c2; it also refreshes the PR #331 task reference from the now-removed active path to docs/agents/tasks/archive/OTC-20260816-linux-ci-hybrid.md.

Objective

Refresh Track A agent dispatch after merged PR #331 and the promoted canonical-live session governance.

New execution boundary

GitHub-hosted by default: static/deterministic analysis, workflow/Lua validation, unit/integration tests, Linux build, ldd, real OTClient artifact Xvfb startup smoke, logs/evidence/coverage processing.

Synology/self-hosted: the serialized physical runtime lane only — one canonical persistent exact-client session, real display/input, login/relogin, walking/clicking, LAN/runtime integration, long-lived observation and physical gameplay E2E.

Hosted Xvfb liveness is explicitly not physical gameplay E2E.

Persistent session

The target topology is one registered idle persistent exact-client runtime reused serially under current Gate A / required rebind / Gate B. It is not one logged-in session per researcher.

This PR does not claim that a canonical live session currently exists. It preserves the trusted-base non-claims: :98 = UNKNOWN, 6082 = UNKNOWN, PID/session = NOT_REGISTERED until fresh authoritative evidence.

Missing registration routes to canonical_bootstrap; generation mismatch routes to canonical_rebind; no shortcuts/manual registration editing are authorized.

Agent routing

• P2-NETWORK: GitHub-hosted default; real stimulus requested from RUNTIME if needed.
• P0-STATE: GitHub-hosted discovery; causal real-client validation via RUNTIME or separately admitted read-only target.
• P1-BRIDGE: GitHub-hosted implementation/tests; physical reacquisition/restart proof via RUNTIME.
• RUNTIME: Synology physical owner/provider of login/display/input/gameplay/restart evidence.
• COVERAGE-AUDIT: GitHub-hosted only.

Adds dispatch fields EXECUTION_CLASS, RUNTIME_ACCESS, PERSISTENT_SESSION_ROLE, PHYSICAL_E2E_REQUIRED and requires pre-upgrade dispatches to refresh before mutation.

Prior validation

PR #342 head a99b166428a7f4ebe81d0d430a9f2758d6e49609 passed CI / Required, deterministic admission-policy audit and fresh admission behavior audit with zero unresolved review threads. Those results are historical evidence only; this restacked exact head must pass again.

Scope

Documentation/governance only. No client launch, login, runtime observation/mutation, credentials, workflow changes, Track B changes or owner-funded AI/API use.

Validation

• manual routing regression matrix: PASS;
• exact-head repository CI required;
• Track A runtime-governance audits required;
• zero unresolved material review findings required before merge;
• post-merge task archive/ownership release required.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.