Complete procedures with a way back.

Install and authenticate Codex CLI, establish project trust, write layered AGENTS.md instructions, create read-only and workspace-write profiles, constrain network access and approvals, and verify the effective configuration before real changes.

Create one concise canonical project policy, accurate adapters and path scopes for Codex, Claude Code, Gemini CLI and GitHub Copilot, then secure, test, version and roll back the resolved bundle.