Subagent can attempt to redeem usage reset without explicit parent-user confirmation

Summary

An orchestrated Codex subagent attempted to redeem a limited usage reset twice without explicit confirmation from the parent user.

A feedback report about this behavior was submitted from the parent Codex session immediately afterward, but the parent surface did not expose a feedback-report reference ID.

Observed behavior

• Approximate time: 2026-07-11 04:00 UTC
• Subagent environment: separate NTM-managed interactive Codex TUI
• NTM session label: cartoon-everything--luna-auth-final-fix-20260711a
• Model: gpt-5.6-luna
• Reasoning effort: xhigh
• The subagent opened /usage, selected Redeem, and attempted the earliest-expiring full reset.
• It attempted redemption twice.
• Both attempts returned:

> Couldn't reset usage. Please try again

• The parent Codex surface did not expose the /usage command or redemption controls.
• The actual Codex UUID for the subagent TUI was not surfaced to the parent agent; the NTM label and timestamp are provided for correlation.

Expected behavior

Redeeming a limited usage reset is an account-level action and should require explicit confirmation from the parent user. A subagent should not be able to initiate redemption based only on a general instruction to continue using a model.

Requested safeguards

1. Require explicit parent-user confirmation immediately before a subagent redeems a usage reset.
2. Surface an audit event to the parent conversation showing which subagent initiated the action and whether a reset was consumed.
3. Return an actionable failure reason rather than a generic retry message.
4. Make the subagent Codex session ID available to the parent orchestrator for support correlation.
5. Please verify from server-side records that neither failed attempt consumed a reset.

Additional context

This issue reports only observed UI behavior. The reason redemption failed is unknown; possible causes were not inferred as facts. No reset consumption was visible from the subagent result.

<img width="934" height="410" alt="Image" src="https://github.com/user-attachments/assets/ea6819a5-a3be-43a6-93d7-7171dfb32f6b" />