# S00-030 handoff — external socket environment still invalid

Executor: auto-ci-cd-d37c9faf28f3 (ci-cd). No source changes or additional model/storage execution.

Bounded no-model `codex -c 'sandbox_mode="workspace-write"' -c sandbox_workspace_write.network_access=true sandbox -- python3 -c '<synthetic filesystem probe>'` failed before command execution, exit 1: `error building bubblewrap command: app-server socket directory must be a user-owned directory with mode 0700`.

XDG_RUNTIME_DIR=/run/user/1000 is already uid 1000/mode 0700 and current uid is 1000; this does not identify the actual failing socket directory. No write/read/remove or denial check ran. Evidence: state/evidence/S00-030-auto-ci-cd-d37c9faf28f3.md.

Next input: host/coordinator identifies the actual socket directory used by installed Codex, repairs its ownership/mode through the supported host lifecycle, and supplies nonsecret confirmation. New resolver process must run the bounded no-model probe with original project restrictions intact and document only the verified setup in docs/AUTOMATION.md. No broadening writable roots or sandbox bypass. Reporter ends after escalation; coordinator owns further sessions.