Complete procedures with a way back.

Build a reviewable Claude Code repository setup with concise CLAUDE.md instructions, path-scoped rules, explicit settings scopes, deny-first permissions, an enforceable Bash sandbox, protected credentials, honest network boundaries, and repeatable policy and runtime probes.

Create one concise canonical project policy, accurate adapters and path scopes for Codex, Claude Code, Gemini CLI and GitHub Copilot, then secure, test, version and roll back the resolved bundle.