A restricted host sandbox (e.g. a Codex task with network disabled) denies
the spawned peer CLI network/keychain access, producing the exact same
"Not logged in" signal as a genuine account logout. The classifier surfaces
that string verbatim and the fold-in prose told the agent to name an
authentication failure, so a sandbox-blocked peer was misreported as the
user's account being logged out, prompting a needless re-login.
Add an execution-context clause to the cross-model classify step in
ce-code-review, ce-doc-review, and ce-pov: an auth-shaped peer failure
describes only the peer's execution context, is never reported as the
account being logged out, and never triggers a login prompt. It also notes
the pass is additive and how to actually obtain it (a context where the
peer CLI can reach the network). Portable prose, no harness-specific
mechanism. A whitespace-tolerant contract test guards the parity.
Claude-Session: https://claude.ai/code/session_01Y1ueYJunshMhJHfcfVCbPp
Trevin Chow
64d18542a8