codex-review-gatelisted

# Codex Review Gate Use this gate after implementation and local verification. Dispatch reviews only through the local gtwy stdio MCP server, never through a direct codex CLI command. In Codex the gateway tools normally have names such as mcp__gtwy__codex_request and mcp__gtwy__codex_request_async; some clients show their short names instead. ## Non-Negotiable Review Rules 1. Omit model unless the user selected one. 2. Pass approvalStrategy: "legacy". Codex cannot use mcp_managed, and approvalPolicy has no effect for it. 3. Use sandboxMode: "read-only" for an inspection-only review. Use sandboxMode: "workspace-write" only when the reviewer needs to create build or test artifacts. Do not use fullAuto; it is deprecated shorthand for workspace-write. 4. Require this exact terminal JSON verdict: `APPROVED_UNCONDITIONALLY`, `CHANGES_REQUIRED`, or `BLOCKED_EXTERNAL`. 5. Do not impose a review-round, turn, token, price, cost, or wallclock cap. Do not use a provider equivalent of those controls to shorten a mandatory review. The configured idle-timeout safeguard only detects a process that stops producing output. 6. Accept only explicit, evidence-backed `APPROVED_UNCONDITIONALLY`. Conditional approval, residual findings, a malformed verdict, inability to verify, cancellation, timeout, or provider error does not pass the gate. Keep fixing and re-reviewing until the required verdict arrives. Stop only on explicit user cancellation or a terminal externa