docs: clarify git handoff policy

Author: bradpotts

AGENTS.md

@@ -13,18 +13,31 @@
 
 | Agent | Role | Authority |
 |-------|------|-----------|
-| Claude Code | Lead implementation and validation | [CLAUDE.md](CLAUDE.md) |
-| OpenAI Codex | Documentation, release readiness, stabilization, and repo hygiene | [CODEX.md](CODEX.md) |
+| Claude Code | Lead implementation and validation | [CLAUDE.md](CLAUDE.md) — **no git access** |
+| OpenAI Codex | Documentation, release readiness, stabilization, repo hygiene, **and all git operations in this repo** | [CODEX.md](CODEX.md) |
 | ChatGPT | Strategy, coordination, prompt design, and external review | Support only |
 | GitHub Copilot | Development assistance | [COPILOT.md](COPILOT.md) |
 | Google Jules | Bounded automated maintenance | [JULES.md](JULES.md) |
 
-**All AI agents in this roster** — Claude Code, OpenAI Codex, GitHub Copilot,
-and Google Jules — have full commit, push, and tag authority in this
-repository, effective 2026-07-25 by explicit direction from Bradley Potts —
-see the Commit Policy section in each agent's own guide
-([CLAUDE.md](CLAUDE.md), [CODEX.md](CODEX.md), [COPILOT.md](COPILOT.md),
-[JULES.md](JULES.md)). **OpenAI Codex** additionally has release authority:
+**Claude Code has no git access in this repository, effective 2026-08-13 by
+explicit direction from Bradley Potts.** This revokes and replaces the prior
+grant of commit, push, and tag authority to Claude Code described below.
+Claude Code must not run any git command — read-only (`git status`, `git
+diff`, `git log`) or mutating (`git commit`, `git push`, `git tag`, or any
+other) — here. Claude Code's role stops at editing files and validating
+changes; it then hands off to Codex (or Bradley Potts) to execute any git
+operation. See [CLAUDE.md](CLAUDE.md) "Git Access — Denied" for the
+repo-specific statement of this policy.
+
+**OpenAI Codex, GitHub Copilot, and Google Jules** retain full commit, push,
+and tag authority in this repository, effective 2026-07-25 by explicit
+direction from Bradley Potts — see the Commit Policy section in each agent's
+own guide ([CODEX.md](CODEX.md), [COPILOT.md](COPILOT.md),
+[JULES.md](JULES.md)). **Codex additionally now executes git operations on
+behalf of Claude Code's finished work in this repo** — when Claude Code hands
+off a validated, ready-to-commit change, Codex is the agent that runs the
+actual `git add`/`commit`/`push`/`tag` commands for it. **OpenAI Codex**
+additionally has release authority:
 Codex cuts releases autonomously — version bump, changelog versioning,
 `v<version>` git tag, and GitHub Release publish via `gh` — for every
 release-ready `CHANGELOG.md [Unreleased]` section, without waiting for
@@ -36,11 +49,11 @@ covers git and release operations within each agent's own scope of work as
 defined above — it does not expand what any agent is authorized to decide
 otherwise. ChatGPT has no repository access and is excluded.
 
-**A commit is not finished until it is pushed.** Every agent in this roster
-must push immediately after committing (`git push`, including any needed
-`-u`/tags) as part of the same action — never leave a commit sitting local
-only. This closes a recurring gap where an agent commits and stops short of
-pushing, leaving work stranded on the machine.
+**A commit is not finished until it is pushed.** Every agent with git
+authority in this roster must push immediately after committing (`git push`,
+including any needed `-u`/tags) as part of the same action — never leave a
+commit sitting local only. This closes a recurring gap where an agent commits
+and stops short of pushing, leaving work stranded on the machine.
 
 **Commit authorship is human-only.** No agent adds itself (or any other AI)
 as a commit author or co-author — no `Co-Authored-By: Claude`/`Codex`/

CLAUDE.md

@@ -22,12 +22,19 @@ was not migrated; do not conflate the two. Shared HTTP plumbing beyond that
 belongs upstream in `ruby_api_pack_core` — see that repo's own `CLAUDE.md`
 before changing anything that looks like generic request/response handling.
 
-## Commit Policy
-
-See [AGENTS.md](AGENTS.md) for the full grant of authority. Claude Code
-applies it here: run validation before committing, then stage, commit,
-tag, and push without per-action confirmation. `gem push` (RubyGems
-publish) stays with Bradley Potts.
+## Git Access — Denied
+
+**Claude Code has zero git access in this repo, as part of a companywide
+policy.** Claude Code must not run `git commit`, `git push`, `git tag`, or
+any other git command — read-only or mutating — here. This supersedes the
+prior commit/push/tag grant described in [AGENTS.md](AGENTS.md). OpenAI
+Codex now executes all git operations for this repo; see [AGENTS.md](AGENTS.md)
+and [CODEX.md](CODEX.md).
+
+When work is ready, Claude Code runs the validation gate described in
+[AGENTS.md](AGENTS.md) and then stops short of any git command, handing off
+to Codex (or Bradley Potts) with a summary of files changed and validation
+performed. `gem push` (RubyGems publish) stays with Bradley Potts.
 
 ## Development Workflow
 

CODEX.md

@@ -9,6 +9,11 @@ commit, push, and tag authority for its own scope of work, including
 cutting the release itself (see "Release Mechanics" below). `gem push`
 (RubyGems publish) and merge decisions stay with Bradley Potts.
 
+Claude Code has no git access in this repo. Codex is now also responsible for
+executing git operations for Claude Code's handed-off, validated work here —
+staging, committing, and pushing it — not just Codex's own
+documentation/hygiene commits.
+
 ## Default Workflow
 
 1. Inspect the current working tree and preserve unrelated local changes.