The vendored dependency source is not a Codex workspace crate, and its official amalgamation assets necessarily exceed the default blob budget. Keep the pinned source auditable under third_party and allowlist the required large upstream artifacts.