Catalog-backed workflow local result — 2026-09-23

FLOW-08A task a119cf0b-e546-47ea-9253-a18550913336 resolves immutable agent versions into the existing worker/verifier lifecycle. Server base 0402bb8e43bbfa778f90118a2ed99325459a3a4f; Bridge base fb590bd3f4a7113c44fada4847c726af9c2e91a2; branch codex/catalog-workflow.

The new MCP dispatch accepts catalog IDs/versions and exact project document source mappings. The server resolves role methodology, optional role/soul and all skills from allowlisted immutable Git files, bounds reads, checks account and project access, and freezes provenance. Final transaction locks protect source authorization and identity availability. Exact retries preserve their original contract. Existing inline-profile dispatch remains available; absent reasoning is omitted to preserve legacy request hashes.

Bridge passes optional reasoning effort to both native CLI adapters, including the scoped Codex App Server turn. Supported flags were checked against installed Claude help and generated Codex App Server JSON schema. Provider model support still determines whether a requested combination runs; no silent fallback.

Validation: complete isolated PostgreSQL/MCP suite 292 passed in 22.17s, no skips; 94 Rust tests passed in 1.09s, fmt/clippy clean. New tests cover actual MCP dispatch and final server acceptance with synthetic Git/provider events, source mismatch/revocation/size, account/project isolation, retirement and historical pins, retry behavior and native argument/protocol forwarding. This result does not certify real provider execution of a catalog profile or production activation; those are the next controlled release acceptance.