docs: add Codex handover for the Local Studio incident

[moortekweb-art]

Adds docs/HANDOVER_CODEX_2026-08-01.md, a handover record for the Local Studio / Node1 incident investigation. Documentation only — no code, no test, and no configuration changes.

The document exists so the work can transfer to Codex without a claim being mistaken for a check. Every section is labelled either VERIFIED (executed and observed directly in this repository) or UNVERIFIED (reported by the Node1 sub-agent thread, with no reachable evidence).

Verified findings recorded

• Suite is green. 1491 passed, 2 skipped against 85578f9. origin/main is two commits ahead, but that diff is two PNG assets and zero .py files, so the result carries.
• The reported import failure is a deploy defect, not a code defect. _managed_workspace_identity and the test importing it landed in the same commit (a1d0413, which bumped 0.13.5 → 0.13.6). No clean checkout at any commit can produce that ImportError; it requires tests and package resolving at different versions simultaneously.
• The unreadable audit JSON is out of repo scope. local-node1-goal-integration-audit.json has zero references anywhere in the codebase. It is an environment ownership problem.
• Latent fragility, reproduced. There is no root conftest.py and no tests/__init__.py, so bare pytest from the repo root fails with ModuleNotFoundError. CI only works because it runs the editable install first. This is a second, independent route to an import error that would be easily misdiagnosed as the contract mismatch above.

Left explicitly unverified

The reported fully self-closing run (20260731T200851Z). Its artifacts never reached GitHub — confirmed by grep over the working tree, git log --all -S across all refs, and the PR listing. The checker, the review, and the acceptance are all harness components, so the claim is self-referential. The document states what would settle it rather than resolving it either way.

Notes for review

• Internal hostnames and personal filesystem paths are generalized (<node1-host>, <controller-home>) because this file ships with the repository.
• The document's Phase 0 flags unpushed work that currently exists on only one machine, which is the most time-sensitive item it records.
• Opened as a draft: if incident handovers do not belong in docs/ permanently, this can be closed without losing anything, since the findings are reproducible from the commands the document contains.

---

Generated by Claude Code