Two of the four non-hook #303 process follow-ups (the two docs items; the
security scan and migration-on-prod-copy smoke are deferred to their own
sessions):
1. Codex-skip rubric (kickoff workflow lore): an independent review pass is
MANDATORY for diffs touching locks/concurrency, auth/security, API
write-path handlers, or migrations, or >~150 changed C# lines; skippable
only for a pure-SPA/docs leaf, and a skip must be stated + justified. Makes
self-exemption an auditable claim (the correlated-blindspot net).
2. Live-E2E is now a STATED REQUIREMENT for API write-path handler changes:
new "When live-E2E is required" section in docs/e2e-local.md + a decisions.md
entry, formalizing the #229 lore bullet. The seeding recipe was already in
e2e-local.md (added for #220), so the stale "recipe not yet in docs" lore
bullet is pruned to a pointer.
Docs-only.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>