verify

# Verify `/verify` is opt-in. Do not invoke it automatically before push or PR creation: the default pre-PR evidence is TDD plus the exact task-defined tests and E2E commands. Use this skill only when the user explicitly asks for a broad local audit or when a PR/CI finding needs it. Supply the `/commit` hook receipt and last successfully verified SHA when available. ## What to do Run the selected commands once in the primary session. Avoid overlapping full suites in the same checkout; wait for a running command to finish before starting another. Capture targeted failure evidence instead of repeatedly rerunning a broad suite. If the execution relay terminates an otherwise healthy long-running check, rerun that check **once** in one named, monitored `tmux` session with an exit sentinel. Do not run a parallel retry. Record the log path and result, then close the session after collecting the sentinel. If that retry fails or its result cannot be recovered, return the evidence as a blocked or failed verification report. - If verify passes cleanly: report success. - If verify fails: fix the reported cause in the same conversation, rerun the relevant targeted checks, commit if needed, and restart verification. - If verify reports that required sandbox capabilities could not be authorized, stop before push or PR delivery and surface its required user action. On Codex, tell the user exactly: "Switch the mode selector to `Agent (full access)`, then retry verification." Expl...