Complete procedures with a way back.

Create a production support workflow with typed specialist handoffs, bounded tools, guardrails, durable sessions, resumable human approvals, trace review, and deterministic release evaluations.

Build a production incident assistant that accepts signed alerts and bounded log excerpts, removes credentials and personal identifiers before durable storage, links every conclusion to immutable evidence, suggests only reviewed runbooks, drafts rather than performs external actions, requires an incident commander to approve dispatch, and exports a portable incident record.

Install and authenticate Codex CLI, establish project trust, write layered AGENTS.md instructions, create read-only and workspace-write profiles, constrain network access and approvals, and verify the effective configuration before real changes.

Connect models to real capabilities with strict schemas, deterministic policy, human approval, idempotent execution, bounded retries and complete audit evidence.