Observed
Findings (?view=findings) shows a correct fail-closed banner:
Discovery is blocked before model spend: credential unavailable
Badges: In-process · gpt-5.6-terra · UNVERIFIED.
The primary green button is still Explore next (disabled). There is a Preflight outline button. Nothing tells a first user how to attach the existing Codex OAuth session, or that a heuristic-only path can run without DeepSeek / Codex.
README says the UI remains useful without a DeepSeek key because the default Codex route uses the local Codex OAuth session. When that session is also missing, the desk looks dead.
Why it matters
The control plane is doing the right thing (no silent model spend). The UI still sells the spend action as the main CTA. First users bounce or hunt for a key instead of taking a no-spend next step.
Proposed direction (not a spec)
Do not build a new OAuth wizard. When dispatch is BLOCKED / credential unavailable:
- Do not keep Explore next as the green primary.
- Point at the existing Codex session / Agent operations path, or at heuristic-only work that does not need a provider key.
No DeepSeek and no Codex session must still look operable.
Out of scope
- New credential product
- Enabling live execution
- Auto-starting campaigns
Playtest: first-user walk, analysis-only, no Explore next / Scout / Pi clicked.
Observed
Findings (
?view=findings) shows a correct fail-closed banner:Badges:
In-process · gpt-5.6-terra · UNVERIFIED.The primary green button is still Explore next (disabled). There is a Preflight outline button. Nothing tells a first user how to attach the existing Codex OAuth session, or that a heuristic-only path can run without DeepSeek / Codex.
README says the UI remains useful without a DeepSeek key because the default Codex route uses the local Codex OAuth session. When that session is also missing, the desk looks dead.
Why it matters
The control plane is doing the right thing (no silent model spend). The UI still sells the spend action as the main CTA. First users bounce or hunt for a key instead of taking a no-spend next step.
Proposed direction (not a spec)
Do not build a new OAuth wizard. When dispatch is
BLOCKED/ credential unavailable:No DeepSeek and no Codex session must still look operable.
Out of scope
Playtest: first-user walk, analysis-only, no Explore next / Scout / Pi clicked.