[Pigbibi]

What changed

Add read-warm-recovery-snapshot.yml, a manual main-only read-only workflow behind the existing protected Environment. Reuse WIF for GET-only Resource Manager, Cloud Run and exact bootstrap-object reads. Verify stable target snapshots and receipt/card bindings; export only authenticated CMS AES-256-GCM ciphertext for the coordinator. The reader supplies live bootstrap fields without invoking bootstrap or recovery.

Protected reader configuration and a trusted coordinator encryption certificate are separate prerequisites. This PR provisions neither. The retained recovery operator is unchanged. No cloud mutation, workflow dispatch, Secret/IAM write, deployment, PAPER, live, Kelly or stop-loss activation is authorized or performed. Leave this PR Draft for the established review-and-merge bot.

How verified

• Focused reader/bootstrap suites: 51 passed; final narrower reader assertions: 16 passed.
• Full repository suite: 6707 passed, 6 skipped, 368 subtests passed; exit 0.
• Full Ruff, documentation check, workflow shell checks, YAML parse and public runtime configuration scan passed; documentation has one existing advisory.
• Before implementation, the original new-test import failed at collection. In an isolated unchanged-base worktree, deferring only the import allowed all 16 new cases to record individual missing-feature failures. No candidate guard was removed to manufacture failures.
• CMS encryption roundtrip, ciphertext tamper rejection, private diagnostics, GET-only transport, missing/changed receipt, stale snapshot and restarted export directory covered offline.
• Real protected execution, deployed adoption, native Environment approval, WIF permissions, coordinator key custody and receipt availability remain unverified. No workflow was dispatched.

AI assistance

Implemented and locally self-reviewed with OpenAI Codex (gpt-6.1-sol, medium reasoning; configured by the job runner). Independent review is requested from the established Codex review service on this exact head; its result is pending.

Publication scan

publication-check/2.0-advisory (build 83d9d1130377), advisory exit 0: full tracked tree 2582 findings / 2457 matching lines. Pre-new-file inventory: 2581 findings / 2456 lines; the added finding is public OIDC permission syntax. The changed-files/artifact scan found 25 lines in two files: existing rollout documentation and public workflow permission syntax; no reader/test matches. No real credential or new target binding was found in the added source. The central public runtime configuration scan passed with zero matches. No scanner enforcement or repository gate was changed.

First 20 matches (shared-masked text):

.env.example:11 IB_GATEWAY_HOST=<PROJECT_ID>
.env.example:19 TELEGRAM_TOKEN=<<HOST>>
.<PROJECT_ID>/CODEOWNERS:9 /.env.example @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:10 /.github/CODEOWNERS @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:11 /application/account_new_risk_gate_support.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:12 /application/execution_kernel_adapter.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:13 /application/execution_receipt_adapter.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:14 /application/execution_service.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:15 /application/ibkr_order_execution.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:16 /application/paper_execution_admission.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:17 /application/paper_execution_command_consumer.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:18 /application/portfolio_risk_diagnostics.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:19 /application/relative_risk_preview.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:20 /application/tqqq_offline_risk.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:21 /runtime_execution_policy.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:22 /scripts/deploy_notification_only.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:23 /scripts/deploy_pilot_no_traffic.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:24 /scripts/execution_report_heartbeat.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:25 /scripts/ibkr_deployment_audit.py @<PROJECT_ID>
.<PROJECT_ID>/CODEOWNERS:26 /scripts/summarize_execution_ledger_cloud.py @<PROJECT_ID>

[Pigbibi]

@codex review

Please review the exact current head recorded below, including all four changed files, protected Environment boundaries, GET-only provider transport, encrypted-only export, receipt bindings, drift handling and failure diagnostics. This is a Draft-only change; no operational dispatch or merge is requested.

Exact head: 3846f9f

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-06T19:55:56.201541Z	3846f9f	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Can't wait for the next one!

Reviewed commit: 3846f9f11a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".