1

docs/codex/NEXT_STEP_PROMPT.md

@@ -586,25 +586,31 @@ artifacts:
 `artifacts/c18z108-dedicated-breadcrumbs-smoke-result.json`, and
 `artifacts/c18z109-breadcrumb-freshness-window-smoke-result.json`.
 
-Current active continuation after C19Z1:
+Current active continuation after C20Z6:
 
-C19Z1 is implemented and runtime-smoke-proven. Remote Workspace adapter sessions
-now expose read-only mailbox handoff preflight:
-`GET /mesh/v1/remote-workspace/adapter-sessions/{adapter_session_id}/mailbox/preflight?consumer_id=...&resume_from=ack|checkpoint`.
-The response validates the consumer cursor and reports the expected next event
-window (`after_sequence`, available/returned/skipped counts, first/last expected
-sequence) without reading, draining, acking, or mutating consumer state.
-Node-agent image `rap-node-agent:codex-service-supervisor-20260512z2` is
-deployed on `test-1/2/3`. Verification artifacts:
-`artifacts/c19z1-remote-workspace-mailbox-preflight-smoke-result.json`, C19X
-source
-`artifacts/c19z1-remote-workspace-mailbox-preflight-source-result.json`, and
-C19Z regression
-`artifacts/c19z-remote-workspace-adapter-readiness-smoke-result.json`.
+C20Z1 through C20Z6 are implemented and runtime-smoke-proven. The C20 stage is
+terminal-complete by contract. It opened and validated a new explicit
+real-adapter enablement request as a contract-only transition:
+`rap.remote_workspace_real_adapter_c20_stage_terminal_complete.v1`, with
+`terminal_status=stage_terminal_complete_contract_only`,
+`stage_status=complete_no_more_c20_layers_required`,
+`stage_name=c20_real_adapter_new_explicit_enablement_request`,
+`validation_chain_status=complete_contract_only`,
+`enablement_boundary=runtime_enablement_requires_next_explicit_runtime_stage`,
+`enablement_decision=validated_contract_only_not_enabled`,
+`enablement_status=validated_not_enabled`,
+`runtime_gate_state=validated_contract_only_not_enabled`,
+`runtime_effect=contract_only_no_runtime_enablement`,
+`operator_default_action=keep_real_adapter_disabled_until_next_explicit_runtime_stage`,
+`next_allowed_entrypoint=next_explicit_runtime_enablement_stage_only`,
+`allows_process_start=false`, and `allows_payload_traffic=false`. Docker-test
+`test-1/2/3` remain on
+`rap-node-agent:codex-service-supervisor-20260513z52`. Verification artifact:
+`artifacts/c20z6-remote-workspace-real-adapter-stage-terminal-complete-compatibility-smoke-result.json`.
 
-Next narrow Remote Workspace layer should stay probe-only and node-local. A good
-C19Z2 candidate is handoff preflight telemetry: add counters/last-preflight
-fields for the read-only preflight endpoint in workload status/heartbeat reports,
-so operators can distinguish handoff checks from mailbox reads. Do not add
-desktop frame transport, Android work, backend relay semantics, or production
-adapter payload forwarding in this slice.
+The not-approved factory remains terminal-complete by contract, and C20 is now
+also terminal-complete by contract. Do not add more C20 continuation layers.
+The only allowed next entrypoint is a new explicit runtime enablement stage.
+Keep the real adapter disabled until that new stage explicitly changes runtime
+state: no process start, no real RDP frame transport, no Android work, no
+backend relay semantics, and no production adapter payload forwarding.