# Report Inbox · 2026-08-26 · codex-hub-session

Status: receipt-shard

## 12:01 KST · Service 기본 SSH 비특권 전환과 privileged emergency fallback 보존

Receipt: `20260826-codex-hub-service-nonroot-ssh-cutover-r01`

### 결과
- Service 기본 SSH route를 전용 비특권 account/key로 전환하고 기존 privileged route/key를 보존했다.
- 세 repository Git metadata와 Docker read-only acceptance를 통과하고 Codex Hub owner 경계를 정합화했다.

### 검증
- 두 SSH route의 effective mapping 분리, authorized key 단일 등록과 bounded backup을 확인했다.
- Git identity, application repository source, container/runtime과 /data의 변경은 0이다.

### 남은 작업
- Contextra memory-disk와 storage 계약은 work-session actual worktree 분석에서 별도 판단한다.

<!-- codex-report-receipt-v1:eyJjb21taXRzIjpbXSwicmVjZWlwdF9pZCI6IjIwMjYwODI2LWNvZGV4LWh1Yi1zZXJ2aWNlLW5vbnJvb3Qtc3NoLWN1dG92ZXItcjAxIiwicmVtYWluaW5nIjpbIkNvbnRleHRyYSBtZW1vcnktZGlza-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 -->