docs(wish): plan Codex task-CWD remediation

[namastex888]

Summary

• add the approved seven-group remediation plan for the Codex plugin dogfood findings
• make exact Codex effective CWD the governing MCP invariant and hard-gate route removal on a black-box host proof
• cover delivery recovery, setup/doctor truth, managed agents, install metadata, and native release evidence

Review and validation

• fresh independent plan review: SHIP, no governing gaps
• bun run wishes:lint: 61 files, 0 broken brainstorm links
• focused dependency baseline: 161 tests passed
• supply-chain advisory baseline: 258 tests passed
• pre-push typecheck, Biome, dead-code, skill/wish/council/hook/plugin gates: passed

Lifecycle boundary

• this PR contains planning evidence only; it does not implement or activate the remediation
• depends on feat(codex): plugin update handoff — permit-gated activation, protocol-safe delivery + rollback #2617, which is merged into dev; its WISH ledger still requires final lifecycle reconciliation
• Group B's independently reviewed host-CWD proof must SHIP before Group A may remove the plugin MCP route
• direct or insecure install provenance, native-attestation semantics, and the pre-publish candidate inventory remain mandatory execution-review pressure tests

Artifact

• .genie/wishes/codex-plugin-dogfood-remediation/WISH.md

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 73ac75dc-0a86-4897-8ef5-635f0d84fe83

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch wish/codex-plugin-dogfood-remediation

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}