diff --git a/packages/subagent/subagent-codex/tests/real-product.spec.ts b/packages/subagent/subagent-codex/tests/real-product.spec.ts
index 4e65489d82..1e71d1065a 100644
--- a/packages/subagent/subagent-codex/tests/real-product.spec.ts
+++ b/packages/subagent/subagent-codex/tests/real-product.spec.ts
@@ -385,9 +385,7 @@ describe('real @openai/codex 0.147.0 product', () => {
 
   it('executes an explicitly selected dangerous bypass write in the isolated workspace', async () => {
     const sideEffect = 'bypass-side-effect'
-    const command = process.platform === 'win32'
-      ? `cmd /c echo bypass>${sideEffect}`
-      : `printf bypass > ${sideEffect}`
+    const command = `echo bypass>${sideEffect}`
     const commandCalls = [
       {
         name: 'exec_command',
diff --git a/scripts/verify-cordis-config.ts b/scripts/verify-cordis-config.ts
index ebfbbbc939..281be99f50 100644
--- a/scripts/verify-cordis-config.ts
+++ b/scripts/verify-cordis-config.ts
@@ -294,11 +294,12 @@ function validateAppResolution(): string[] {
 /**
  * Discover workspace Bundle packages from their manifest declaration.
  * @param repoRoot Repository root to scan.
- * @returns Sorted repository-relative package manifest paths.
+ * @returns Sorted slash-normalized repository-relative package manifest paths.
  */
 export function bundleManifestPaths(repoRoot: string = root): string[] {
   return globSync('packages/*/*/package.json', { cwd: repoRoot })
     .filter(path => typeof readManifest(path, repoRoot).dsh?.bundle?.patch === 'string')
+    .map(path => path.replaceAll('\\', '/'))
     .sort()
 }