- Per-model timeout of 60s so one hung model does not block siblings - Simplify cost_cents math (cost_usd * 100 directly, no double-rounding) Defer: fine-grained PAT for CTO_ADMIN_TOKEN (requires manual OAuth device flow). Agent-Session: cowork-reviewer-ab-20260414