Part of #303. Ships two of the four non-hook process follow-ups (the two docs items). The security scan (#197 exit criterion) and migration-on-prod-copy smoke are deferred to their own focused sessions.
1. Codex-skip rubric (kickoff workflow lore)
Extends the Codex-rotation bullet with an auditable skip rubric: an independent review pass (Codex, or a fork when exhausted) is mandatory for diffs touching locks/concurrency, auth/security, API write-path handlers, or migrations, or >~150 changed C# lines; skippable only for a pure-SPA/docs leaf — and a skip must be stated + justified. Self-exemption becomes a claim, not silence (the correlated-blindspot net — #235/#250).
2. Live-E2E is a stated requirement for API write-path handler changes
New "When live-E2E is required" section in docs/e2e-local.md: a write-path (POST/PUT/DELETE/api/* mutate-then-reload) PR must include a live-E2E round-trip pass, because unit/characterization tests share a correlated blind spot on the lazy-enumeration / reload-through-read-path 500 class (#229).
New docs/decisions.md entry (+ TOC) formalizing it as a standing convention.
The seeding recipe was already in e2e-local.md (added for #220), so the stale "recipe not yet in docs" lore bullet is pruned to a pointer.
Docs-only → exempt from the H6/H10 merge gate.
Review
Per the Codex-skip rubric this PR introduces (dogfooded): pure-docs leaf, no server-state effect → an independent review pass is skipped, stated here. Verification is decisions.md append-only (pure insertions, no [decisions-edit] needed) + the decisions-guard/docs-reminder CI jobs.
Part of #303. Ships **two of the four** non-hook process follow-ups (the two docs items). The security scan (#197 exit criterion) and migration-on-prod-copy smoke are deferred to their own focused sessions.
## 1. Codex-skip rubric (kickoff workflow lore)
Extends the Codex-rotation bullet with an auditable skip rubric: an independent review pass (Codex, or a fork when exhausted) is **mandatory** for diffs touching locks/concurrency, auth/security, API write-path handlers, or migrations, or >~150 changed C# lines; **skippable** only for a pure-SPA/docs leaf — and a skip must be **stated + justified**. Self-exemption becomes a claim, not silence (the correlated-blindspot net — #235/#250).
## 2. Live-E2E is a stated requirement for API write-path handler changes
- New **"When live-E2E is required"** section in `docs/e2e-local.md`: a write-path (`POST`/`PUT`/`DELETE` `/api/*` mutate-then-reload) PR must include a live-E2E round-trip pass, because unit/characterization tests share a correlated blind spot on the lazy-enumeration / reload-through-read-path 500 class (#229).
- New `docs/decisions.md` entry (+ TOC) formalizing it as a standing convention.
- The seeding recipe was **already** in `e2e-local.md` (added for #220), so the stale "recipe not yet in docs" lore bullet is pruned to a pointer.
Docs-only → exempt from the H6/H10 merge gate.
## Review
Per the **Codex-skip rubric this PR introduces** (dogfooded): pure-docs leaf, no server-state effect → an independent review pass is **skipped, stated here**. Verification is `decisions.md` append-only (pure insertions, no `[decisions-edit]` needed) + the `decisions-guard`/`docs-reminder` CI jobs.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Part of #303. Ships two of the four non-hook process follow-ups (the two docs items). The security scan (#197 exit criterion) and migration-on-prod-copy smoke are deferred to their own focused sessions.
1. Codex-skip rubric (kickoff workflow lore)
Extends the Codex-rotation bullet with an auditable skip rubric: an independent review pass (Codex, or a fork when exhausted) is mandatory for diffs touching locks/concurrency, auth/security, API write-path handlers, or migrations, or >~150 changed C# lines; skippable only for a pure-SPA/docs leaf — and a skip must be stated + justified. Self-exemption becomes a claim, not silence (the correlated-blindspot net — #235/#250).
2. Live-E2E is a stated requirement for API write-path handler changes
docs/e2e-local.md: a write-path (POST/PUT/DELETE/api/*mutate-then-reload) PR must include a live-E2E round-trip pass, because unit/characterization tests share a correlated blind spot on the lazy-enumeration / reload-through-read-path 500 class (#229).docs/decisions.mdentry (+ TOC) formalizing it as a standing convention.e2e-local.md(added for #220), so the stale "recipe not yet in docs" lore bullet is pruned to a pointer.Docs-only → exempt from the H6/H10 merge gate.
Review
Per the Codex-skip rubric this PR introduces (dogfooded): pure-docs leaf, no server-state effect → an independent review pass is skipped, stated here. Verification is
decisions.mdappend-only (pure insertions, no[decisions-edit]needed) + thedecisions-guard/docs-reminderCI jobs.🤖 Generated with Claude Code
5c193a20eatob20ee50b1f