OmniRoute 20128 at max effort for gpt-6.1-sol: upstream PR 15167 on the running build, lsof shim v2, restart record

[seathatflowsinourveins]

Scope

• What this PR changes: records the 2026-09-30T06:32:50Z restart of the 20128 gateway (omniroute.service, only) onto build cf6748d04: the running build plus upstream PR #15167, so gpt-6.1-sol reaches max effort (before it, every max request was sent as xhigh: 1154 of 1495 rows since 00:00Z). It adds the qualification (upstream's check:pack-artifact and check:pack-boot, boot smoke, 147 of 147 targeted tests), the offline wire table, the probe gate before and after, the owner records before and after, the switch output and unit diff, and a new lsof shim v2 in the new prefix that keeps a client's dead connection from blocking a restart (found on the way; reproduced and tested with kept outputs). It also records the 05:50Z to 05:55Z incident on 20129's sharedgw node (my probe; repaired by the dashboard's Test connection). Text changes: the decision record (update section, deltas table, residual), docs/foundation-stack.md, the unit template's shim comment, and the omniroute row text of manifests/stack.json (build ids, the carry, the shim).
• Not in this PR: any change to 20129, hindsight-live, settings, combos or the pool; the component pin (version stays 3.8.50); compression on 20128 (still an open user decision); a fix for the sharedgw hazard (upstream has none and I have no reference implementation).
• Base commit: 7d0189117028907261d06926dee86844c1ae8f1e (main after OmniRoute 3.8.51 from npm: install, boot smoke, provenance and signature receipt (the component pin stays 3.8.50) #533).
• Lane: lane:shared: the omniroute row of manifests/stack.json is a shared hot file (docs/lanes.md); the trading lane's acknowledgement at this head is needed before merge. No trading path is touched.
• Owned paths touched: evidence/artifacts/omniroute-sol-max-20260930/, docs/decisions/, docs/foundation-stack.md, adoption/templates/systemd/omniroute.service, manifests/stack.json (omniroute row only), manifests/evidence.json (registration, last commit).

SOTA sources

• Upstream PR #15167 "feat(models): add GPT-6.1 Sol to Codex catalog and pricing", head f5d8e150b79e0901fa18241c7f29bff889b87c14, one commit, 5 files +23/-0 on release/v3.8.52 (a1a2dce1a64a4b123f80ec899fc88bb2aa34d1a4); carried like #13788: a cited upstream change, cherry-picked with its stable patch-id verified equal (14ec6648f50fc499d430f28d2af7840cd2d46055).
• Upstream source read at 2f42a9ac19d1a247ec9ce5473b790843724b3061 (the build's base): open-sse/executors/codex/reasoningSuffix.ts (alias sets, suffix parser), open-sse/executors/codex.ts (clampEffort, effort resolution), bin/cli/utils/pid.mjs findListeningPids and bin/cli/commands/serve.mjs resolveServeBusyPids (the preflight and its #14518 bind-probe fallback, unchanged on release/v3.8.52 and main), src/lib/contextWindowResolver.ts, src/lib/db/models/syncedAvailableModelPersistence.ts, src/shared/services/modelSyncScheduler.ts, src/sse/services/authTerminalStatus.ts (the bare-401 rule behind the sharedgw expiry).
• Codex 0.159.2's own bundled catalog (codex debug models --bundled, offline): gpt-6.1-sol supports low to ultra including max.
• Precedent: docs/decisions/2026-09-30-omniroute-rebuild.md and its artifacts (OmniRoute rebuild 2026-09-30: decision record, evidence artifacts, owner-record script, unit templates (records what runs; compression on 20128 not applied) #530).

Evidence-class table

Claim	Evidence class	Command / receipt
The PR is one commit of 5 files, its patch-id equals the cherry-pick's, and Codex 0.159.2 lists max for the model	source_review	receipt C1; checks/upstream-pr-15167-identity.txt, checks/codex-bundled-catalog-0159.2.txt
Before the restart 20128 sent max as xhigh (1154 of 1495 rows); astra was sent as requested	local_integration (read-only call_logs counts)	C2; checks/calllog-effort-counts-before-switch.json
Offline, exactly five gpt-6.1-sol requests change their wire model and effort and eight others do not	local_integration	C3; checks/effort-wire-*.json
The candidate built with upstream's scripts, check:pack-artifact and check:pack-boot pass, boot smoke health 200, targeted tests 147 of 147 equal to the baseline	native_proven for upstream's checks on our build, local_integration for the rest	C4; checks/qualification-*.txt
Preflight trap reproduced with shim v1 (restart refused), fixed with v2 (health 200 in 5 s), a second real instance still refused	local_integration	C5; checks/preflight-*
The restart changed three unit lines, 20129 and hindsight-live are untouched, read-back clean	local_integration	C6, C8; checks/switch-output.txt, checks/readback-after-switch.txt, checks/owner-record-*.json
After the restart max is sent as max, the suffix ids and the bare id answer 200, a 0.157.1 client request answers 200	native_proven (live calls through the gateway, effort read from call_logs)	C7; checks/probe-gate-*.json
An unknown id through the sharedgw node parked its connection for 4.5 minutes; the repair and its state	local_integration (a transcription of printed outputs)	C9; checks/sharedgw-connection-expiry-20260930.txt

Local commands run

$ python3 scripts/validate.py
{"components": 69, "hashed_files": 8421, "profiles": 4, "receipts": 175, "status": "passed"}                                             exit 0
$ python3 scripts/evidence_manifest.py --check
{"files": 8421, "status": "passed"}                                                          exit 0
$ python3 -B -m unittest tests.test_foundation_stack_pins tests.test_omniroute_gateway_unit tests.test_adoption_contract tests.test_freeze_snapshot tests.test_catalogs tests.test_stack_lifecycle
Ran 268 tests in 112.480s ... OK                                                                exit 0

The full unittest discovery runs in CI's validate check.

Decision record

docs/decisions/2026-09-30-omniroute-rebuild.md, "Update 2026-09-30, 06:32Z" (alternatives, the comparison that would overturn each choice, residuals), and evidence/artifacts/omniroute-sol-max-20260930/receipt.json.

Host evidence

This PR adds an artifact directory under evidence/artifacts/, not evidence/hosts/.

• scripts/validate.py (exit 0 above) validates the registered artifacts.
• Independent review: requested in this PR; the Gate A owner independently reproduced the 06:33Z owner record (same digest except taken_utc) and verified the shim hashes.
• No platform_status change.

Checklist

• No workflows or Actions are changed.
• No secrets are printed, logged or committed.
• No new paid hosting, subscription or billing surface.
• Peer-owned untracked files and worktrees were preserved.

🤖 Generated with Claude Code

[seathatflowsinourveins]

Trading lane acknowledgement (docs/lanes.md:146-150). Reviewed at head 2196413dee1a3a80d0c0b9a792a0e314a36c3c6b (base 7d0189117028907261d06926dee86844c1ae8f1e, which is origin/main at review time) by native-agent-stack-e0, which holds the trading lane.

• Shared hot files (docs/lanes.md:26): in manifests/stack.json, 69 rows before and after with the same ids and order; only the omniroute row differs, in upstream_sources, freshness and command_scope; its version stays 3.8.50; no top-level key changes. manifests/evidence.json changes the entries of four files this PR edits (manifests/stack.json now sha256 265bcff0ed17a7f328abb783829fa6a8598f888badc31431e32f9874fe46e61e, 98,938 bytes, equal to the head's file) and adds 48 entries, all under evidence/artifacts/omniroute-sol-max-20260930/; no entry is removed and no other key changes (docs/lanes.md:94-97).
• Trading paths: none of the 55 files is trading-owned (docs/lanes.md:25), and the added row text names no trading, paper, broker or us-equities component. No paper, recovery, monitor or overnight unit calls OmniRoute, so the 2026-09-30T06:32:50Z restart of 20128 recorded here touched no paper step.

No objection. Merge with this head pinned and 8/8 required checks in bucket pass (docs/lanes.md:153-167); if the head moves, this acknowledgement carries over only when the manifests/stack.json diff between the two heads is empty (docs/lanes.md:181-190).