test: capture EVRUN-full smoke evidence

[aryeko]

Summary

• Add an opt-in EVRUN-full smoke that ties GitHub Issues, real Codex app-server, real host attestation, GitHub Forge open-pr landing, records integrity, and redaction checks into one disposable target run.
• Factor shared EVRUN smoke evidence helpers and reuse them from the existing partial smoke.
• Commit the 2026-07-06 EVRUN-full combined-smoke evidence record and update current docs/status surfaces to keep stronger no-phone-home and idempotency probes open.

Evidence

Final credentialed smoke run after hosted-review HTTPS credential fix:

• Command: EVRUN_FULL_SMOKE=1 ... corepack pnpm exec vitest run packages/jig-sdk/tests/smoke/evrun-full.smoke.test.ts
• Result: 1 test passed in 66.62s
• Run ID: run-evrun-full-smoke-1783351643050-94edb35a-5f62-4315-a4b9-79320e60beb8
• Smoke PR: test: evrun full smoke codex landing edit jig-smoke-target#17, closed and branch deleted during cleanup
• Driver selection: agent=codex, executionHost=real, forge=github, workSource=github-issues
• Landing: runner-action.opened-pr
• Integrity: verified
• run.json sha256: 30d8ada63f99ef1298e2bed78789f89a4f5eca658f5bd799b3f642783f280a88
• integrity sha256: 62a1e7795d880e2057e80b80f6d20a9fa54abfcdc226f46a217626f81a7f7898

Verification

• Scoped-header proof: Git auth header applies to https://github.com/... and not https://example.invalid/...
• corepack pnpm exec vitest run packages/jig-sdk/tests/evrun-smoke.unit.test.ts
• corepack pnpm exec vitest run packages/jig-sdk/tests/smoke/evrun-partial.smoke.test.ts packages/jig-sdk/tests/smoke/evrun-full.smoke.test.ts packages/jig-sdk/tests/smoke/codex-app-server.p3.smoke.test.ts packages/jig-sdk/tests/smoke/real-host.p4.smoke.test.ts
• Credentialed EVRUN_FULL_SMOKE=1 run passed
• corepack pnpm check
• Independent pre-PR Codex reviewer approved after provenance wording fix
• Independent local reviewer approved the scoped-header hosted-review fix

Limits

• Strong adversarial no-phone-home evidence remains open.
• Multi-run idempotency against a repeated real effect remains open.
• Hosted/remote operation and Windows behavior remain out of scope for this smoke.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cc7d2c3cb0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".