Running a coding agent in CI: the walls, in the order you hit them

The agent gets one shot, on a machine with no browser and nobody to ask — which changes which failures you get. We ran four headless arms on one real failing test: the locked-down run with no allowlist was denied Bash and Edit, wrote nothing, exited 0, reported subtype "success" and cost $0.383 —…