ouroboros-ai 0.26.0b8.dev1__tar.gz → 0.26.1.dev2__tar.gz

ouroboros_ai-0.26.1.dev2/.claude-plugin/.mcp.json

@@ -0,0 +1,9 @@
+{
+  "mcpServers": {
+    "ouroboros": {
+      "command": "uvx",
+      "args": ["--from", "ouroboros-ai", "ouroboros", "mcp", "serve"],
+      "timeout": 600
+    }
+  }
+}

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
     {
       "name": "ouroboros",
       "description": "Transform vague ideas into validated seed specifications through Socratic questioning and ontological analysis",
-      "version": "0.26.0b7",
+      "version": "0.26.0",
       "author": {
         "name": "Q00",
         "email": "jqyu.lee@gmail.com"

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ouroboros",
-  "version": "0.26.0b7",
+  "version": "0.26.0",
   "description": "Self-improving AI workflow system. Crystallize requirements before execution with Socratic interview, ambiguity scoring, and 3-stage evaluation.",
   "author": {
     "name": "Q00",

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ouroboros-ai
-Version: 0.26.0b8.dev1
+Version: 0.26.1.dev2
 Summary: Specification-first workflow engine for AI coding agents. Works with Claude Code and Codex CLI.
 Author-email: Q00 <jqyu.lee@gmail.com>
 License-File: LICENSE
@@ -23,6 +23,7 @@ Requires-Dist: typer>=0.12.0
 Provides-Extra: all
 Requires-Dist: anthropic>=0.52.0; extra == 'all'
 Requires-Dist: claude-agent-sdk>=0.1.0; extra == 'all'
+Requires-Dist: litellm<=1.82.6,>=1.80.0; extra == 'all'
 Requires-Dist: pandas>=2.2.0; extra == 'all'
 Requires-Dist: plotly>=5.24.0; extra == 'all'
 Requires-Dist: streamlit>=1.40.0; extra == 'all'
@@ -33,6 +34,8 @@ Provides-Extra: dashboard
 Requires-Dist: pandas>=2.2.0; extra == 'dashboard'
 Requires-Dist: plotly>=5.24.0; extra == 'dashboard'
 Requires-Dist: streamlit>=1.40.0; extra == 'dashboard'
+Provides-Extra: litellm
+Requires-Dist: litellm<=1.82.6,>=1.80.0; extra == 'litellm'
 Description-Content-Type: text/markdown
 
 <p align="right">
@@ -77,18 +80,14 @@ Description-Content-Type: text/markdown
 
 > **Security Notice (2026-03-24): LiteLLM PyPI Supply Chain Attack**
 >
-> LiteLLM versions 1.82.7 and 1.82.8 on PyPI contained a malicious `.pth` file that **auto-executes on every Python startup** (no `import` needed), exfiltrating environment variables, API keys, SSH keys, and cloud credentials to an external server.
+> LiteLLM versions **1.82.7** and **1.82.8** on PyPI contained a malicious `.pth` file that auto-executes on every Python startup, exfiltrating environment variables, API keys, and credentials to an external server.
 >
-> **Am I affected?** You are at risk if, **after March 23, 2026**, you either:
-> - Fresh-installed Ouroboros (`pip install ouroboros-ai`, `uv tool install ouroboros-ai`), or
-> - Upgraded an existing install (`pip install --upgrade ouroboros-ai`)
+> **What we did:** Ouroboros now pins LiteLLM to **`<=1.82.6`** (safe versions only) as an optional dependency. LiteLLM is no longer a core dependency — it is only installed when you explicitly opt in via `pip install ouroboros-ai[litellm]`.
 >
-> In both cases, `litellm>=1.80.0` was a dependency, and your package manager would have resolved it to the malicious 1.82.7/1.82.8. If you installed before that date and haven't reinstalled or upgraded since, you are likely safe.
->
-> **Ouroboros has removed litellm entirely** as of v0.25.2 (stable) and v0.26.0b7 (beta). However, **upgrading Ouroboros only removes litellm from the dependency list — it does NOT uninstall litellm itself or delete the malicious `.pth` file already on your system.** You must clean up manually:
+> **If you previously installed litellm 1.82.7 or 1.82.8**, the malicious `.pth` file may still be on your system even after upgrading. Clean up manually:
 >
 > ```bash
-> # 1. Find the malicious file — delete any results
+> # 1. Find and delete the malicious file
 > find / -name "litellm_init.pth" 2>/dev/null
 >
 > # 2. Clean package manager caches
@@ -98,7 +97,7 @@ Description-Content-Type: text/markdown
 > # 3. Rotate ALL credentials that were on your system during the exposure window
 > ```
 >
-> References: [LiteLLM #24512](https://github.com/BerriAI/litellm/issues/24512) · [Ouroboros #195](https://github.com/Q00/ouroboros/issues/195) · [Analysis](https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/)
+> References: [LiteLLM #24512](https://github.com/BerriAI/litellm/issues/24512) · [Ouroboros #195](https://github.com/Q00/ouroboros/issues/195) · [DSPy mitigation](https://github.com/stanfordnlp/dspy/commit/66e33399bf29)
 
 ---
 
@@ -106,11 +105,6 @@ Description-Content-Type: text/markdown
 
 Ouroboros sits between you and your AI runtime (Claude Code, Codex CLI, or others). It replaces ad-hoc prompting with a structured specification-first workflow: interview, crystallize, execute, evaluate, evolve.
 
-<!-- TODO: Replace with demo GIF or asciicast -->
-<p align="center">
-  <em>[Demo: 2-minute walkthrough from vague idea to verified code -- coming soon]</em>
-</p>
-
 ---
 
 ## Why Ouroboros?
@@ -130,7 +124,7 @@ Most AI coding fails at the **input**, not the output. The bottleneck is not AI
 **Install** — one command, everything auto-detected:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/release/0.26.0-beta/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/main/scripts/install.sh | bash
 ```
 
 **Build** — open your AI coding agent and go:
@@ -176,25 +170,6 @@ After one loop of the Ouroboros cycle, a vague idea becomes a verified codebase:
 | **Seed** | No spec | Immutable specification with acceptance criteria, ontology, constraints |
 | **Evaluate** | Manual review | 3-stage gate: Mechanical (free) -> Semantic -> Multi-Model Consensus |
 
-<!-- Screenshots: replace placeholder paths with actual images after recording -->
-<p align="center">
-  <strong>Interview Transcript</strong><br/>
-  <img src="./docs/images/demo-interview.png" width="720" alt="Ouroboros Socratic interview exposing hidden assumptions from a vague prompt"/><br/>
-  <sub>The Socratic Interviewer turns "build me a task CLI" into 12 clarified decisions.</sub>
-</p>
-
-<p align="center">
-  <strong>Seed Artifact</strong><br/>
-  <img src="./docs/images/demo-seed.png" width="720" alt="Ouroboros seed specification with acceptance criteria, ontology, and constraints"/><br/>
-  <sub>Immutable seed spec locks intent -- acceptance criteria, ontology, and constraints -- before a line of code is written.</sub>
-</p>
-
-<p align="center">
-  <strong>Evaluation Verdict</strong><br/>
-  <img src="./docs/images/demo-evaluation.png" width="720" alt="Ouroboros 3-stage evaluation gate showing mechanical, semantic, and consensus results"/><br/>
-  <sub>3-stage verification gate: Mechanical (free) -> Semantic -> Multi-Model Consensus.</sub>
-</p>
-
 <details>
 <summary><strong>What just happened?</strong></summary>
 

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/README.ko.md

@@ -112,7 +112,7 @@ Ouroboros는 이 철학을 **Double Diamond** 구조로 풀어냅니다:
 **설치** — 한 줄이면 전부 자동:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/release/0.26.0-beta/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/main/scripts/install.sh | bash
 ```
 
 **시작** — AI 코딩 에이전트를 열고 바로:

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/README.md

@@ -40,18 +40,14 @@
 
 > **Security Notice (2026-03-24): LiteLLM PyPI Supply Chain Attack**
 >
-> LiteLLM versions 1.82.7 and 1.82.8 on PyPI contained a malicious `.pth` file that **auto-executes on every Python startup** (no `import` needed), exfiltrating environment variables, API keys, SSH keys, and cloud credentials to an external server.
+> LiteLLM versions **1.82.7** and **1.82.8** on PyPI contained a malicious `.pth` file that auto-executes on every Python startup, exfiltrating environment variables, API keys, and credentials to an external server.
 >
-> **Am I affected?** You are at risk if, **after March 23, 2026**, you either:
-> - Fresh-installed Ouroboros (`pip install ouroboros-ai`, `uv tool install ouroboros-ai`), or
-> - Upgraded an existing install (`pip install --upgrade ouroboros-ai`)
+> **What we did:** Ouroboros now pins LiteLLM to **`<=1.82.6`** (safe versions only) as an optional dependency. LiteLLM is no longer a core dependency — it is only installed when you explicitly opt in via `pip install ouroboros-ai[litellm]`.
 >
-> In both cases, `litellm>=1.80.0` was a dependency, and your package manager would have resolved it to the malicious 1.82.7/1.82.8. If you installed before that date and haven't reinstalled or upgraded since, you are likely safe.
->
-> **Ouroboros has removed litellm entirely** as of v0.25.2 (stable) and v0.26.0b7 (beta). However, **upgrading Ouroboros only removes litellm from the dependency list — it does NOT uninstall litellm itself or delete the malicious `.pth` file already on your system.** You must clean up manually:
+> **If you previously installed litellm 1.82.7 or 1.82.8**, the malicious `.pth` file may still be on your system even after upgrading. Clean up manually:
 >
 > ```bash
-> # 1. Find the malicious file — delete any results
+> # 1. Find and delete the malicious file
 > find / -name "litellm_init.pth" 2>/dev/null
 >
 > # 2. Clean package manager caches
@@ -61,7 +57,7 @@
 > # 3. Rotate ALL credentials that were on your system during the exposure window
 > ```
 >
-> References: [LiteLLM #24512](https://github.com/BerriAI/litellm/issues/24512) · [Ouroboros #195](https://github.com/Q00/ouroboros/issues/195) · [Analysis](https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack/)
+> References: [LiteLLM #24512](https://github.com/BerriAI/litellm/issues/24512) · [Ouroboros #195](https://github.com/Q00/ouroboros/issues/195) · [DSPy mitigation](https://github.com/stanfordnlp/dspy/commit/66e33399bf29)
 
 ---
 
@@ -69,11 +65,6 @@
 
 Ouroboros sits between you and your AI runtime (Claude Code, Codex CLI, or others). It replaces ad-hoc prompting with a structured specification-first workflow: interview, crystallize, execute, evaluate, evolve.
 
-<!-- TODO: Replace with demo GIF or asciicast -->
-<p align="center">
-  <em>[Demo: 2-minute walkthrough from vague idea to verified code -- coming soon]</em>
-</p>
-
 ---
 
 ## Why Ouroboros?
@@ -93,7 +84,7 @@ Most AI coding fails at the **input**, not the output. The bottleneck is not AI
 **Install** — one command, everything auto-detected:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/release/0.26.0-beta/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/main/scripts/install.sh | bash
 ```
 
 **Build** — open your AI coding agent and go:
@@ -139,25 +130,6 @@ After one loop of the Ouroboros cycle, a vague idea becomes a verified codebase:
 | **Seed** | No spec | Immutable specification with acceptance criteria, ontology, constraints |
 | **Evaluate** | Manual review | 3-stage gate: Mechanical (free) -> Semantic -> Multi-Model Consensus |
 
-<!-- Screenshots: replace placeholder paths with actual images after recording -->
-<p align="center">
-  <strong>Interview Transcript</strong><br/>
-  <img src="./docs/images/demo-interview.png" width="720" alt="Ouroboros Socratic interview exposing hidden assumptions from a vague prompt"/><br/>
-  <sub>The Socratic Interviewer turns "build me a task CLI" into 12 clarified decisions.</sub>
-</p>
-
-<p align="center">
-  <strong>Seed Artifact</strong><br/>
-  <img src="./docs/images/demo-seed.png" width="720" alt="Ouroboros seed specification with acceptance criteria, ontology, and constraints"/><br/>
-  <sub>Immutable seed spec locks intent -- acceptance criteria, ontology, and constraints -- before a line of code is written.</sub>
-</p>
-
-<p align="center">
-  <strong>Evaluation Verdict</strong><br/>
-  <img src="./docs/images/demo-evaluation.png" width="720" alt="Ouroboros 3-stage evaluation gate showing mechanical, semantic, and consensus results"/><br/>
-  <sub>3-stage verification gate: Mechanical (free) -> Semantic -> Multi-Model Consensus.</sub>
-</p>
-
 <details>
 <summary><strong>What just happened?</strong></summary>
 

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/pyproject.toml

@@ -12,7 +12,6 @@ dependencies = [
     "cachetools>=5.0.0",
     "filelock>=3.13.0",
     "httpx>=0.27.0",
-    # "litellm>=1.80.0",  # Removed: PyPI supply chain attack (issue #195)
     "mcp>=1.26.0",
     "prompt-toolkit>=3.0.0",
     "pydantic>=2.0.0",
@@ -28,8 +27,8 @@ dependencies = [
 
 [project.optional-dependencies]
 claude = ["claude-agent-sdk>=0.1.0", "anthropic>=0.52.0"]
-# litellm = ["litellm>=1.80.0"]  # Removed: PyPI supply chain attack (issue #195)
-all = ["ouroboros-ai[claude,dashboard]"]
+litellm = ["litellm>=1.80.0,<=1.82.6"]
+all = ["ouroboros-ai[claude,litellm,dashboard]"]
 dashboard = [
     "streamlit>=1.40.0",
     "plotly>=5.24.0",
@@ -66,7 +65,7 @@ packages = ["src/ouroboros"]
 
 [dependency-groups]
 dev = [
-    "ouroboros-ai[claude]",
+    "ouroboros-ai[claude,litellm]",
     "mypy>=1.19.1",
     "pre-commit>=4.5.1",
     "pytest>=9.0.2",

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/scripts/install.sh

@@ -1,7 +1,6 @@
 #!/bin/bash
 # Ouroboros installer — auto-detects runtime and installs accordingly.
-# Usage: curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/release/0.26.0-beta/scripts/install.sh | bash
-# TODO: Change URL back to main branch when 0.26.0 is officially released
+# Usage: curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/main/scripts/install.sh | bash
 set -euo pipefail
 
 PACKAGE_NAME="ouroboros-ai"
@@ -211,10 +210,11 @@ with open(mcp_file, 'w') as f:
     echo "  MCP: skipped (no python3 found — add manually to $MCP_FILE)"
   fi
 
-  # 5b. Install Ouroboros skills (claude plugin)
+  # 5b. Install/update Ouroboros skills (claude plugin)
   echo "  Installing Ouroboros skills..."
-  if claude plugin marketplace add Q00/ouroboros 2>/dev/null \
-     && claude plugin install ouroboros@ouroboros 2>/dev/null; then
+  claude plugin marketplace add Q00/ouroboros 2>/dev/null || true
+  claude plugin marketplace update ouroboros 2>/dev/null || true
+  if claude plugin install ouroboros@ouroboros 2>/dev/null; then
     echo "  Skills: installed"
   else
     echo "  Skills: skipped (install manually: claude plugin marketplace add Q00/ouroboros && claude plugin install ouroboros@ouroboros)"

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/skills/setup/SKILL.md

@@ -217,7 +217,7 @@ A backup will be created: CLAUDE.md.bak
 **If "Preview first", show:**
 ````markdown
 <!-- ooo:START -->
-<!-- ooo:VERSION:0.26.0b7 -->
+<!-- ooo:VERSION:0.26.0 -->
 # Ouroboros — Specification-First AI Development
 
 > Before telling AI what to build, define what should be built.

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/skills/update/SKILL.md

@@ -116,7 +116,8 @@ When the user invokes this skill:
 
    For Claude Code:
    ```bash
-   claude plugin update ouroboros@ouroboros
+   claude plugin marketplace update ouroboros 2>/dev/null || true
+   claude plugin install ouroboros@ouroboros
    ```
 
    For Codex CLI (re-install skills/rules to ~/.codex/):

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/src/ouroboros/_version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '0.26.0b8.dev1'
-__version_tuple__ = version_tuple = (0, 26, 0, 'b8', 'dev1')
+__version__ = version = '0.26.1.dev2'
+__version_tuple__ = version_tuple = (0, 26, 1, 'dev2')
 
 __commit_id__ = commit_id = None

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/src/ouroboros/bigbang/ambiguity.py

@@ -448,17 +448,14 @@ Additional context (intentional deferrals — do not penalise):
         except json.JSONDecodeError as e:
             raise ValueError(f"Invalid JSON response: {e}") from e
 
-        # Validate all required fields are present
-        required_fields = [
+        # Numeric score fields must be present. Missing justifications are recoverable.
+        required_score_fields = [
             "goal_clarity_score",
-            "goal_clarity_justification",
             "constraint_clarity_score",
-            "constraint_clarity_justification",
             "success_criteria_clarity_score",
-            "success_criteria_clarity_justification",
         ]
 
-        for field_name in required_fields:
+        for field_name in required_score_fields:
             if field_name not in data:
                 raise ValueError(f"Missing required field: {field_name}")
 
@@ -467,6 +464,15 @@ Additional context (intentional deferrals — do not penalise):
             score = float(value)
             return max(0.0, min(1.0, score))
 
+        def justification_for(field_name: str, component_name: str) -> str:
+            value = data.get(field_name)
+            if value is None:
+                return f"{component_name} justification not provided by model."
+            text = str(value).strip()
+            if not text:
+                return f"{component_name} justification not provided by model."
+            return text
+
         # Select weights based on project type
         if is_brownfield:
             goal_weight = BROWNFIELD_GOAL_CLARITY_WEIGHT
@@ -484,7 +490,10 @@ Additional context (intentional deferrals — do not penalise):
                 name="Context Clarity",
                 clarity_score=clamp_score(data["context_clarity_score"]),
                 weight=BROWNFIELD_CONTEXT_CLARITY_WEIGHT,
-                justification=str(data.get("context_clarity_justification", "")),
+                justification=justification_for(
+                    "context_clarity_justification",
+                    "Context Clarity",
+                ),
             )
 
         return ScoreBreakdown(
@@ -492,19 +501,28 @@ Additional context (intentional deferrals — do not penalise):
                 name="Goal Clarity",
                 clarity_score=clamp_score(data["goal_clarity_score"]),
                 weight=goal_weight,
-                justification=str(data["goal_clarity_justification"]),
+                justification=justification_for(
+                    "goal_clarity_justification",
+                    "Goal Clarity",
+                ),
             ),
             constraint_clarity=ComponentScore(
                 name="Constraint Clarity",
                 clarity_score=clamp_score(data["constraint_clarity_score"]),
                 weight=constraint_weight,
-                justification=str(data["constraint_clarity_justification"]),
+                justification=justification_for(
+                    "constraint_clarity_justification",
+                    "Constraint Clarity",
+                ),
             ),
             success_criteria_clarity=ComponentScore(
                 name="Success Criteria Clarity",
                 clarity_score=clamp_score(data["success_criteria_clarity_score"]),
                 weight=criteria_weight,
-                justification=str(data["success_criteria_clarity_justification"]),
+                justification=justification_for(
+                    "success_criteria_clarity_justification",
+                    "Success Criteria Clarity",
+                ),
             ),
             context_clarity=context_clarity,
         )

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/src/ouroboros/cli/commands/run.py

@@ -58,6 +58,14 @@ def _derive_quality_bar(seed: "Seed") -> str:
     return "The execution must satisfy all acceptance criteria:\n" + "\n".join(ac_lines)
 
 
+def _get_verification_artifact(summary: dict[str, Any], final_message: str) -> str:
+    """Prefer the structured verification report when present."""
+    verification_report = summary.get("verification_report")
+    if isinstance(verification_report, str) and verification_report:
+        return verification_report
+    return final_message or ""
+
+
 def _load_seed_from_yaml(seed_file: Path) -> dict[str, Any]:
     """Load seed configuration from YAML file.
 
@@ -249,7 +257,7 @@ async def _run_orchestrator(
 
                     qa_result = await qa_handler.handle(
                         {
-                            "artifact": res.final_message or "",
+                            "artifact": _get_verification_artifact(res.summary, res.final_message),
                             "artifact_type": "test_output",
                             "quality_bar": quality_bar,
                             "seed_content": yaml.dump(seed_data, default_flow_style=False),

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/src/ouroboros/evolution/loop.py

@@ -889,7 +889,15 @@ class EvolutionaryLoop:
                 exec_result = await self.executor(current_seed, parallel=parallel)
                 if hasattr(exec_result, "is_ok") and exec_result.is_ok:
                     orch_result = exec_result.value
-                    execution_output = getattr(orch_result, "final_message", str(orch_result))
+                    summary = getattr(orch_result, "summary", {})
+                    verification_report = (
+                        summary.get("verification_report") if isinstance(summary, dict) else None
+                    )
+                    execution_output = (
+                        verification_report
+                        if isinstance(verification_report, str) and verification_report
+                        else getattr(orch_result, "final_message", str(orch_result))
+                    )
                     # Log structured metadata for observability
                     logger.info(
                         "evolution.generation.executed",

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/src/ouroboros/mcp/tools/execution_handlers.py

@@ -409,7 +409,10 @@ class ExecuteSeedHandler:
                         quality_bar = self._derive_quality_bar(_seed)
                         await qa_handler.handle(
                             {
-                                "artifact": result.value.final_message or "",
+                                "artifact": self._get_verification_artifact(
+                                    result.value.summary,
+                                    result.value.final_message,
+                                ),
                                 "artifact_type": "test_output",
                                 "quality_bar": quality_bar,
                                 "seed_content": _seed_content,
@@ -500,6 +503,14 @@ class ExecuteSeedHandler:
         ac_lines = [f"- {ac}" for ac in seed.acceptance_criteria]
         return "The execution must satisfy all acceptance criteria:\n" + "\n".join(ac_lines)
 
+    @staticmethod
+    def _get_verification_artifact(summary: dict[str, Any], final_message: str) -> str:
+        """Prefer the structured verification report when present."""
+        verification_report = summary.get("verification_report")
+        if isinstance(verification_report, str) and verification_report:
+            return verification_report
+        return final_message or ""
+
     @staticmethod
     def _format_execution_result(exec_result, seed: Seed) -> str:
         """Format execution result as human-readable text.

{ouroboros_ai-0.26.0b8.dev1 → ouroboros_ai-0.26.1.dev2}/src/ouroboros/orchestrator/codex_cli_runtime.py

@@ -728,6 +728,25 @@ class CodexCliRuntime:
             return None
         return current_handle.native_session_id
 
+    def _build_child_env(self) -> dict[str, str]:
+        """Build an isolated environment for child runtime processes.
+
+        Strips ``OUROBOROS_AGENT_RUNTIME`` and ``OUROBOROS_LLM_BACKEND`` so
+        that a child Codex process does not re-load the Ouroboros MCP server,
+        preventing the recursive startup loop described in #185.
+        """
+        env = os.environ.copy()
+        # Prevent child from re-entering Ouroboros MCP
+        for key in ("OUROBOROS_AGENT_RUNTIME", "OUROBOROS_LLM_BACKEND"):
+            env.pop(key, None)
+        # Track recursion depth for diagnostics (defensive: ignore malformed values)
+        try:
+            depth = int(env.get("_OUROBOROS_DEPTH", "0")) + 1
+        except (ValueError, TypeError):
+            depth = 1
+        env["_OUROBOROS_DEPTH"] = str(depth)
+        return env
+
     def _requires_process_stdin(self) -> bool:
         """Return True when the runtime needs a writable stdin pipe."""
         return True
@@ -1441,6 +1460,7 @@ class CodexCliRuntime:
                 stdin=(asyncio.subprocess.PIPE if self._requires_process_stdin() else None),
                 stdout=asyncio.subprocess.PIPE,
                 stderr=asyncio.subprocess.PIPE,
+                env=self._build_child_env(),
             )
         except FileNotFoundError as e:
             yield AgentMessage(