[Olympus] Isolate Anthropic credential account selection

[chadsm-sys]

Purpose

Supersede the deferred live Anthropic adapter modification while preserving explicit-token precedence and enforcing one fail-closed selected-account boundary.

Exact candidate

• Head: bc65df1f09aebec57f2ba147bd71782dada57cfa
• Logical parent/integration base: fix(gateway): preserve stream flood-backoff accounting #20 52b8b465b32897b270df1ee0554f295b6428ffeb
• Seven-path child delta: adapter, credential pool, runtime provider, and four regression files.
• Nonblank CLAUDE_CONFIG_DIR resolves before credential-pool selection and is an exclusive boundary when no higher-priority explicit token exists.
• Selected-account Claude credentials are not copied into the shared singleton pool; stale selected entries are pruned.
• Affected credential/runtime/security/gateway/stream matrix: 937 passed; isolated legacy Anthropic file: 173 passed.
• Cross-store crash/reopen/replay: PASS against Mission Control Receiving API errors when messaging through Telegram and using Nous Portal auth NousResearch/hermes-agent#28 b6512e3820b38cb8a2a593e97ee7e5efd0801dd6.
• Remediation-range Gitleaks and diff check: PASS.
• Hosted: run 29345832351 passed at this exact head: 21 success, 8 skipped, 0 failed.

The harness uses temporary homes and mocked Keychain, credential-pool, and OAuth-refresh behavior. No live credential is read or copied.

Boundary

Review only. No merge, deployment, migration, restart, activation, credential change, production routing, external Telegram send, production mutation, or live-runtime edit is authorized.

Olympus v1 final-candidate binding

• Current exact head: 4350ad9aa2b198826302431dc56e62274ec8f512
• Current exact base: e45689c5df583142cd717adcdfeb82b38754334f on codex/M-20260714-olympus-pr21-attested-base
• Current base-relative diff SHA-256: a668feeace3bb5504fe573cac670618b2dd622422ace63af916baf7b5b049ea3
• Governance packet: /Users/macmini/Hermes-Handoff/M-20260714-olympus-authority-remediation/release-preparation/20_FINAL_GOVERNANCE_DECISION.md through 28_FINAL_EVIDENCE_INDEX.md
• Status: governance decision required; this binding is not merge authorization.
• Supersession: any older head/base SHA or review-thread status in this description or prior release evidence is historical and non-authoritative.
• Drift rule: any head change invalidates this binding. Any base change requires final-diff/check/review revalidation before merge.
• Review policy: operator must explicitly select Path A (strict independent human review) or Path B (one-release personal-lab exception, which does not count as independent human review).

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fac02c639a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".