From a host-identified ephemeral Codex side conversation, preview and send a structured handoff to the uniquely verified main task, then open it. Fail closed outside that side-conversation boundary, for subagent coordination, or when the target is ambiguous.