fix: disable unstable Sub2API Codex WS transport

scripts/platform-infra-sub2api-codex-local-config-contract-test.ts

@@ -49,10 +49,20 @@ assertCondition(fresh.includes("[features]"), "fresh TOML must create the featur
 assertCondition(fresh.includes("supports_websockets = true"), "fresh TOML must enable WebSocket transport", fresh);
 assertCondition(fresh.includes("responses_websockets_v2 = true"), "fresh TOML must enable Responses WebSocket v2", fresh);
 
+const disabled = renderCodexLocalConsumerToml(existing, {
+  ...baseOptions,
+  supportsWebSockets: false,
+  responsesWebSocketsV2: false,
+});
+
+assertCondition(disabled.includes("supports_websockets = false"), "disabled localCodex policy must render provider WebSocket transport off", disabled);
+assertCondition(disabled.includes("responses_websockets_v2 = false"), "disabled localCodex policy must render Responses WebSocket v2 off", disabled);
+
 console.log(JSON.stringify({
   ok: true,
   checks: [
     "existing Codex TOML is upgraded to the Sub2API WSv2 consumer settings",
     "fresh Codex TOML creates provider and feature sections with WSv2 enabled",
+    "disabled localCodex WebSocket policy renders both consumer flags off",
   ],
 }));