diff --git a/.github/workflows/live-a2a.yml b/.github/workflows/live-a2a.yml
index a29a71d..4b48680 100644
--- a/.github/workflows/live-a2a.yml
+++ b/.github/workflows/live-a2a.yml
@@ -88,7 +88,7 @@ jobs:
             echo "CODEX_SANDBOX=read-only"
             echo "CODEX_APPROVAL_POLICY=never"
             echo "INKBOX_CODEX_AUTO_APPROVE_INKBOX_TOOLS=true"
-            echo "CODEX_MODEL=gpt-5.4-mini"
+            echo "CODEX_MODEL=gpt-5.6-terra"
           } >> "$GITHUB_ENV"
           printenv OPENAI_API_KEY | codex login --with-api-key
 
diff --git a/.github/workflows/live-channels.yml b/.github/workflows/live-channels.yml
index 3b66432..e32ca85 100644
--- a/.github/workflows/live-channels.yml
+++ b/.github/workflows/live-channels.yml
@@ -111,7 +111,7 @@ jobs:
             # Real OpenAI via the default provider — authenticate the codex CLI
             # with the API key (writes auth.json under CODEX_HOME).
             printenv OPENAI_API_KEY | codex login --with-api-key
-            echo "CODEX_MODEL=gpt-5.4-mini" >> "$GITHUB_ENV"
+            echo "CODEX_MODEL=gpt-5.6-terra" >> "$GITHUB_ENV"
           else
             # Custom provider pointed at the local mock. Codex speaks the
             # Responses API (wire_api "chat" is gone from the host), and a custom
diff --git a/.github/workflows/live-external-events.yml b/.github/workflows/live-external-events.yml
index 6f4fda9..80e8576 100644
--- a/.github/workflows/live-external-events.yml
+++ b/.github/workflows/live-external-events.yml
@@ -111,7 +111,7 @@ jobs:
           # Real OpenAI via the default provider — authenticate the codex CLI
           # with the API key (writes auth.json under CODEX_HOME).
           printenv OPENAI_API_KEY | codex login --with-api-key
-          echo "CODEX_MODEL=gpt-5.4-mini" >> "$GITHUB_ENV"
+          echo "CODEX_MODEL=gpt-5.6-terra" >> "$GITHUB_ENV"
 
       - name: Start gateway and wait for readiness
         env:
diff --git a/.github/workflows/live-voice.yml b/.github/workflows/live-voice.yml
index 26e8124..a711d26 100644
--- a/.github/workflows/live-voice.yml
+++ b/.github/workflows/live-voice.yml
@@ -109,7 +109,7 @@ jobs:
           {
             echo "INKBOX_IDENTITY=$HANDLE"
             echo "INKBOX_ALLOW_ALL_USERS=true"
-            echo "CODEX_MODEL=gpt-5.4-mini"
+            echo "CODEX_MODEL=gpt-5.6-terra"
             # Unattended runner: nobody answers approval texts → never escalate,
             # and keep the sandbox read-only so stray commands stay harmless.
             echo "CODEX_SANDBOX=read-only"