Complete procedures with a way back.

Build a reviewable Claude Code repository setup with concise CLAUDE.md instructions, path-scoped rules, explicit settings scopes, deny-first permissions, an enforceable Bash sandbox, protected credentials, honest network boundaries, and repeatable policy and runtime probes.

Build and verify a default-off Claude Code plugin that packages a manually invoked review skill, a genuinely read-only plugin subagent, a local stdio MCP policy tool, exact runtime dependencies, and a distributable marketplace entry without embedding credentials or pretending that descriptive annotations enforce authorization.

Build a complete Claude Code hook suite that blocks protected edits before execution, formats only reviewed source files after successful edits, emits privacy-safe local notifications, records sanitized configuration-change evidence, survives cwd changes, and has deterministic tests plus an emergency disable path.

Build a two-job GitHub Actions workflow where untrusted pull-request tests run without secrets and a trusted base-branch Agent SDK harness reviews only a bounded diff with no tools, no target-code execution, explicit time and cost limits, structured evidence, and a mandatory human decision.