Complete procedures with a way back.

Turn a proven workflow into a narrowly triggered SKILL.md, package it in a versioned Codex plugin, add fail-closed policy hooks and least-privilege MCP dependencies, test activation and denial paths, distribute through a controlled marketplace, and revoke safely.

Build and verify a default-off Claude Code plugin that packages a manually invoked review skill, a genuinely read-only plugin subagent, a local stdio MCP policy tool, exact runtime dependencies, and a distributable marketplace entry without embedding credentials or pretending that descriptive annotations enforce authorization.

Build a two-job GitHub Actions workflow where untrusted pull-request tests run without secrets and a trusted base-branch Agent SDK harness reviews only a bounded diff with no tools, no target-code execution, explicit time and cost limits, structured evidence, and a mandatory human decision.

Evaluate an MCP server as executable supply chain and delegated authority, pin its identity, constrain a local runtime or verify a remote trust endpoint, configure a positive tool allowlist, review OAuth scopes, observe real effects, test prompt injection, set per-tool approvals and rehearse complete removal.

Pin Helm and chart inputs, separate secrets from values and release history, render and server-validate manifests, stage upgrades with bounded waits, verify application behavior, roll back only across compatible data, and operate hooks, CRDs, drift, and secret rotation.

Install pinned Argo CD 3.4.5, constrain an AppProject, verify repository transport and GnuPG-signed commits or tags, preview manual syncs, sequence waves and hooks, harden revision overrides, rehearse rollback, rotate keys, and plan the separate 3.5 sourceIntegrity migration.

Verify the official installer checksum, install Composer in a controlled path, enforce lock files, audit dependencies, and deploy without development packages.