Record workspace policy boundary for cloud alternatives

[d-morrison]

Summary

• record that personal-workspace alternatives apply only to personally owned repositories
• keep repository authorization and organization workspace policy as separate gates
• preserve dated provenance from the review of Document Codex GitHub pull-request reviews wai#85

Validation

• python3 scripts/validate-skills.py
• python3 scripts/check-links.py
• npx --yes markdownlint-cli2@0.22.1
• independent adversarial review: Ready for merge at 2652c03

Authored by Codex (AI agent).

[d-morrison]

Driving this PR to a clean current-head review; please avoid concurrent branch changes until I post the completion update.

Posted by Codex (AI agent) --- not written by a human.

[github-actions]

Claude finished review — View run

---

Review: PR #2283 — Record workspace policy boundary for cloud alternatives

Scope: Two files changed — a one-row addition to memories/MEMORY.md's index table, and a new file memories/codex-cloud.md (14 lines) recording a workspace-policy lesson learned from reviewing Morrison-Lab/wai#85.

Verification performed

• Content accuracy vs. cited source: Confirmed Morrison-Lab/wai#85 ("Document Codex GitHub pull-request reviews") exists, is merged, and its diff (chapters/ai-tools/codex-github-code-review.qmd) contains the exact guidance this memory paraphrases — "Do not use a personal workspace to connect organization-owned repositories --- that bypasses the workspace policy your administrator set." Not a hallucination; the memory accurately distills the source.
• Dates: wai#85 was created 2026-08-22T03:43Z, reviewed by claude (COMMENTED) on 2026-08-23T01:18Z, and merged 2026-08-24T03:25Z — consistent with the memory's "reviewed on 2026-08-23 ... clean review on 2026-08-24" provenance line.
• Redundancy check: grep -rln "Codex Cloud\|workspace polic" memories/ shared/ CLAUDE.md returns only the two files this PR touches — no pre-existing coverage of this topic elsewhere in the corpus to duplicate.
• Link/skill validation: python3 scripts/check-links.py (2426 links, 0 broken) and python3 scripts/validate-skills.py both pass with this diff applied.
• Markdownlint: npx markdownlint-cli2@0.22.1 on both changed files — 0 errors.
• ASCII punctuation rule (shared/coding/ascii-punctuation-in-source.md): no non-ASCII characters in the new file.
• Diff completeness: gh pr diff --name-only confirms only the two files shown in the saved diff changed — nothing else in scope.
• MEMORY.md row length: the new row (267 chars) is well within this repo's existing convention for memories/MEMORY.md rows, which routinely run 500–1000+ characters (verified against the other 44 rows) — this is not the 150-char auto-memory index convention from CLAUDE.md, which governs a different (session-local) MEMORY.md.

No correctness, hallucination, or CLAUDE.md-compliance issues found. This is a small, well-formed, accurately-sourced documentation addition consistent with the corpus's existing memory-file conventions (heading style, dated provenance note, cross-reference format).

Verdict

Ready for merge

Reviewed commit: 27a3fce

[github-actions]

💰 Cost: $1.6502 (review) — run

[d-morrison]

Done — PR #2283 is free. The current head has green CI, a clean external Claude review, and zero unresolved review threads.

Posted by Codex (AI agent) --- not written by a human.