Normal agent launch provisions fresh Habitat identities/membership and durable messenger receivers. Runtime identity binds sends; receivers enforce the allowlist and mark only after backend acceptance. Saved bindings survive restarts.
Review correction removes historical queue-label acceptance when the live tmux composer is absent. Partial redraws now fail closed. Explicit Codex queue delivery retains its separate server-acceptance path; no retry or model-access change is included.
Current tips: product 586bd10eafc42b32f4b80de439060c92e447ab96; tests 3c85b0a0b0fc0d773d1b869b06a8c728392fb0e0.
Correction validation on b1: 248 Python tests passed in 56.128s, zero skips; real Git boundary failed before the fix, then passed stale-label refusal with zero marks/one pending record and positive empty-composer acceptance with its durable mark. Source at /tmp/m6-builder-revision matches these committed tips.
Earlier M6 evidence: both real Codex queue transport gates passed A→B→A, offline recovery, failure/refusal preservation and full lifecycle restart. Helper 2 + messenger 14 + spike 1 Go tests/builds and four Nix live suites passed previously; these and the model sessions were not rerun for this tmux-only correction. Messenger a212901, Habitat/SAP 242714e, running/profile k0nxcil6 remain unchanged. Independent adversary review is still required.
Tests: #4, stacked on this product PR. Product targets the reviewed M5 tests branch.