Subagent hand-backs rotate the prompt epoch and void commit audits

[DefeatMan]

TL;DR

Claude Code auditor hand-backs rotate the prompt epoch, because auditor-control never registers the namespaced auditor and cancel-verdict-audit.sh ignores agent-message envelopes.

Details

• Evidence (captured hook input): SubagentStart and SubagentStop report agent_type boxlite-agent-tooling:commit-push-auditor; auditor-control.sh:44 accepts only commit-push-auditor. Both the agent-message hand-back and the task-notification then fire UserPromptSubmit as real prompts.
• Approach: accept this plugin namespace; recognise an agent-message whose first and last lines frame it and whose sender holds a completion receipt; credit two deliveries per Claude completion within the existing 300 s window.
• Rejected: dropping epoch binding would let real prompts keep a stale PASS.
• Codex is unchanged.
• Validation: cancel-verdict-audit and auditor-control tests with credited, forged and replayed envelopes.