fix(codex): settle a 429 lineage at the unconfirmed bound

When the root's stop stays unconfirmed, the bound fallback stopped each
active nested turn and waited up to 10s for its interrupt, then rescanned.
One silent subagent pushed the root terminal past the bound.

At the bound, send the nested turns' interrupts without waiting, settle
them and the root under one terminalization permit, and publish the nested
turns' threads as broken since their stop was not confirmed.
c8156276aaHong Liu committed on 10/23/2026, 1:22:07 AMparent386516b

Checks

All checks passed
2 files changedLine totals unavailable