Complete procedures with a way back.

Turn a proven workflow into a narrowly triggered SKILL.md, package it in a versioned Codex plugin, add fail-closed policy hooks and least-privilege MCP dependencies, test activation and denial paths, distribute through a controlled marketplace, and revoke safely.

Build a complete Claude Code hook suite that blocks protected edits before execution, formats only reviewed source files after successful edits, emits privacy-safe local notifications, records sanitized configuration-change evidence, survives cwd changes, and has deterministic tests plus an emergency disable path.