Use native Codex goal mode for a clear, low-risk, one-repository task where failure is cheap and independent evidence is unnecessary. Use CEWP when bounded scope, checkpoint approval, resumable recovery, deterministic verification, independent review, or a tamper-evident receipt justifies the extra operations.
In one sentence: CEWP adds local-first supervision, recovery, independent verification,
and reviewable evidence around long-running Codex work without pretending to control
private host state. A finalized evidence-receipt/v1 proves that value; native host
completion alone does not.