docs: record decided claude-community reject

[kyle-sexton]

Closes #3616

Summary

The owner decided Q2 on #3616: reject submitting any plugin to claude-community, recorded as a decision, not a permanent ban. The playbook still showed the row as proposed: reject.

Fix

In docs/migration-playbook.md, section "Marketplace schema positions":

• The claude-community row Position changes from proposed: reject to reject, with the submission bar (one plugin per submission, security scan on every version) and a note to revisit if a specific plugin gets outside demand.
• The section intro and the Claim bullet no longer describe a proposed row awaiting ratification, since none remain.
• The Recheck bullet now names a maintainer revisiting the claude-community reject as the trigger.

.claude-plugin/marketplace.json is unchanged.

Verification

• No occurrence of "proposed" remains in the section (grep -ci proposed over the section returns 0).
• git diff --stat shows only docs/migration-playbook.md.

Related

• docs: record decided marketplace schema positions #5352 recorded the Q1, Q3 and Q4 decisions in the same section.
• docs: fix factual and wording defects in top-level docs and the native-surface store #5268 marked the rows as proposed pending the owner decision.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-30T03:59:56.347546Z	01bb1e3	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[claude]

Claude finished @kyle-sexton's task in 28s —— View job

---

Security review — /review:security-review

• Gather context (PR diff, docs/migration-playbook.md)
• Check skip gate / instruction-surface lens
• Post findings

Skip gate: PR is open, single commit, no prior passing security review on this head. Proceeded to review.

Diff scope: docs/migration-playbook.md only — the "Marketplace schema positions" section. The change finalizes the claude-community row from proposed: reject to reject (adding a submission-bar note and a revisit condition), and updates the surrounding prose/Claim/Recheck bullets to stop describing a row awaiting ratification. .claude-plugin/marketplace.json is unchanged, confirmed via gh pr diff.

Instruction-surface lens: This diff finalizes and tightens a restriction (proposed: reject → reject) rather than removing, narrowing, or softening one — no standing rule loses coverage here. Not a finding.

Result: no security issues found. This is a prose-only documentation update with no code, script, workflow, permission, or config changes, and no injection/auth/secrets/trust-boundary surface.

[claude]

Claude finished @kyle-sexton's task in 3m 14s —— View job

---

Review complete

• Gather context (diff, PR body, CLAUDE.md/AGENTS.md conventions)
• Invoke /review:code-review criteria
• Verify factual claims against cited sources
• Post findings

Scope: docs/migration-playbook.md, the "Marketplace schema positions" section only. This is a docs-only diff (+7/-9); .claude-plugin/marketplace.json is unchanged, as claimed.

Verified (author-claimed, independently confirmed):

• No occurrence of "proposed" remains in the section, confirmed by reading the section directly.
• git show --stat on the PR's single commit shows only docs/migration-playbook.md changed.
• The intro paragraph and "Claim" bullet no longer describe a proposed row, consistent with there being none left.

One finding posted inline on the claude-community row (docs/migration-playbook.md#L1430): the new specifics added in this PR, "one plugin per submission, with a security scan on every version", aren't stated on the row's own cited source page, Anthropic's marketplaces, which I fetched directly. Those exact facts do appear on Anthropic's directory-submission pages (pre-submission-checklist, publish#submit-to-anthropics-directory), but the docs explicitly describe the claude.ai directory as a separate distribution path from the claude-community GitHub marketplace this row is about. Worth confirming the submission bar described is actually claude-community's, and citing the page that says so, before merging.

Not raised as a finding (below the high-signal bar, noted for completeness): the new "Recheck" line runs to about 105 chars against a roughly 90-96 char wrap elsewhere in the doc. Cosmetic only, and MD013 (line length) is disabled in .markdownlint-cli2.jsonc, so nothing enforces it.

I could not run gh issue view against #3616 in this sandbox (network commands require an approval I can't grant myself), so the claim that "the owner decided Q2" on that issue is author-claimed and unverified by me.

[claude]

Claude finished @kyle-sexton's task in 1m 17s —— View job

---

Code review — /review:code-review

• Gather context (diff at new head, prior review comments)
• Check skip gate
• Review against criteria
• Post findings

Skip gate: PR is open, not draft. Current head (7a95138) has no prior completed review from this lane, so proceeded.

Diff scope: docs/migration-playbook.md only, "Marketplace schema positions" section. Two commits: 01bb1e3 finalizes the claude-community row from proposed: reject to reject; 7a95138 removes the row's "one plugin per submission, with a security scan on every version" specifics that a prior review round on this lane flagged as unsupported by the row's cited source.

Verified:

• git diff --stat across both commits touches only docs/migration-playbook.md.
• No occurrence of "proposed" remains in the section (grep -ci proposed over lines 1412–1451 returns 0).
• 7a95138 directly resolves the earlier code-review finding on this row (permalink): it deletes the two unsupported specifics rather than re-sourcing them, so the row no longer asserts anything beyond what Anthropic's marketplaces states.

Result: no findings. The current head resolves the one open issue from the prior review round and introduces no new correctness or maintainability problems. This is a prose-only documentation change with no code, test, or config surface.

[claude]

Claude finished @kyle-sexton's task in 47s —— View job

---

Security review — /review:security-review

• Gather context (PR diff, docs/migration-playbook.md)
• Check skip gate / instruction-surface lens
• Post findings

Skip gate: re-run for the new commit 7a95138 (prior reviews on this PR covered 01bb1e3). PR is open. Diff for 7a95138 only removes the unsupported "one plugin per submission, with a security scan on every version" specifics from the claude-community row — the change flagged by the earlier review comment. Proceeded to review.

Diff scope (full PR, origin/main...HEAD): docs/migration-playbook.md, "Marketplace schema positions" section only — confirmed via git diff --stat. The claude-community row's Position moves from proposed: reject to reject; the intro, Claim, and Recheck bullets stop describing a row awaiting ratification; and the latest commit drops the unsupported submission-bar specifics, leaving the row's remaining claims backed by its cited source. .claude-plugin/marketplace.json is unchanged.

Instruction-surface lens: This diff finalizes a restriction (proposed: reject → reject) and then tightens it further by removing an unsupported claim — it doesn't remove, narrow, or soften any standing rule. The reject verdict and its rationale (this repo is the distribution channel; forks may list on claude-community, this fleet does not) stay intact. Not a finding.

Result: no security issues found. This is a prose-only documentation update with no code, script, workflow, permission, or config changes, and no injection/auth/secrets/trust-boundary surface.