PR #27356 real Linux dev verification baseline github/main: 8b74a69019 (separate /home/user/main worktree, vp i) main dev: server 16733 / web 8693; stopped captured process group before PR startup. main: Providers has no proxy URL or per-instance Use proxy. Real Codex gpt-6.1-sol baseline turn completed. PR original head: e21db30c42ccbc561b5b40b9351125fdec0c5dc5 PR isolated dev: server 13773 / web 5733, --home-dir /home/user/t3code/.t3, no seeded data. client: repo Playwright, /usr/bin/google-chrome, actual project /home/user/t3code created through UI. proxy configured through Settings > Providers: http://127.0.0.1:28317/v1/ (secret omitted). Codex gpt-6.1-sol: new turn returned PROXY-BASELINE-27356. server restart, same thread/native conversation: response maple-27356 retained earlier codeword. provider trace: thread/start modelProvider=t3_proxy; thread/resume modelProvider=t3_proxy. remove proxy: useProxy remains true, Codex disabled, new-thread model unavailable. restore proxy: ready without restarting server; follow-up returned PROXY-RESTORED-27356. final Codex turn returned CODEX-FINAL-27356. Sanitized live loopback capture during final actual client turns (request lines only): 2026-11-01T01:34:48.880Z POST /v1/responses HTTP/1.1 2026-11-01T01:35:16.352Z POST /v1/messages?beta=true HTTP/1.1 Claude Haiku 5.5: saved env.ANTHROPIC_BASE_URL=/saved-settings-override caused HTTP 404 on original head. Fix: route overrides in private 0600 settings file, retained for session lifetime; no proxy key in process argv. Same saved settings after fix: real turn returned CLAUDE-PROXY-27356, final turn CLAUDE-FINAL-27356, resumed turn CLAUDE-ROUTE-27356. Conflicting managed remote-settings.json: turn rejected before provider startup; server recorded ClaudeProxySettingsError: Claude managed policy conflicts with proxy routing. Remote blacksmith vp run check:changed : format/lint/knip/graphql/typecheck/react-compiler passed; 24 test files / 665 tests passed plus 4 targeted react compiler cases. Unverified: native desktop/mobile, macOS/Windows policy sources, OpenCode, management-key account limits, keyless proxy (actual proxy requires key), existing direct Codex rollout migration/fork/archive/rollback.