CLI Delegation

Hand well-scoped tasks to an external CLI agent — Claude Code (claude -p), Codex (codex exec / codex review), or Cursor (cursor-agent -p). Core principle: every delegated result is a proposal to verify, never truth. Delegation is encouraged: fan out parallel invocations for independent subtasks, then verify each return yourself.

Invariants

• Verify-before-trust: never trust unreviewed delegated work — a delegated result gets used or relayed only after it's checked against local evidence.
• Volatile flags: CLI flags drift between releases — verify against --help at run time; the references carry gotchas, not flag tables.
• Secrets: scan diffs/files for credentials before piping them out; if risk is unclear, don't pipe — surface the path and why it's suspected (never the raw value) and get explicit sign-off.
• Bound every run: turn caps (e.g. --max-turns 3–10), timeouts, fan-out width of a handful, not hundreds.