Clarify Docker Lint Authorization

[ptr727]

Summary

• document digest-pinned, network-disabled Docker lint commands with read-only repository mounts
• separate executor-neutral authorization rules from Codex, Claude Code, and opencode host configuration
• document persistent worktree access and link the future host-hook work tracked by Add safety hooks for opencode and codex #781

Verification

• python3 scripts/build_dist.py --check
• python3 -m unittest scripts.tests.test_build_dist
• python3 scripts/repo_gate.py
• python3 scripts/prose_lint.py --diff origin/develop --summary
• python3 scripts/prose_lint.py --check sentence-length --diff origin/develop --summary
• markdownlint-cli2 in the documented digest-pinned Docker invocation
• CSpell in the documented digest-pinned Docker invocation
• editorconfig-checker, ShellCheck, PSScriptAnalyzer, and actionlint in their documented Docker invocations

References #866.

[Copilot]

Pull request overview

This PR clarifies the authorization model for running repository-standard Docker-based linters under restricted executors by documenting a digest-pinned, network-disabled, read-only-mount invocation pattern and separating executor-neutral guidance from agent/provider-specific host configuration.

Changes:

• Update local-lint runbooks (GOVERNANCE/OPERATIONS) to: docker pull, resolve RepoDigests, then docker run with --network=none and read-only bind mounts.
• Add provider-scoped host guardrail and worktree-access documentation for Codex/opencode alongside Claude Code.
• Propagate the new guidance into the skill distributions (repo + plugin + installed skill trees) and update spelling whitelist.

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
spec/scope-model.md	Clarifies host-vs-repo rule “home” semantics and points to provider-specific host forms.
README.md	Splits host guardrail guidance by provider and links the missing-hook tracking issue.
OPERATIONS.md	Updates verification/runbook Docker lint commands to digest-pinned, network-disabled, read-only mounts.
host-setup/agent-safety/README.md	Renames to Claude-specific kit and links provider-specific host docs/issues.
GOVERNANCE.md	Documents executor-neutral authorization boundaries and updates canonical Docker lint invocations.
docs/host-setup.md	Adds provider-scoped write-safety and worktree-access configuration, including Codex config example.
cspell.json	Adds “opencode” to accepted words.
.github/skills/repo-worktree/SKILL.md	Adds agent-specific worktree tool notes (Claude/Codex/opencode).
.github/skills/comment-and-doc-style/SKILL.md	Adds Docker lint authorization guidance for restricted executors.
.claude-plugin/fleet-skills/skills/repo-worktree/SKILL.md	Mirrors repo-worktree skill updates into the Claude plugin distribution.
.claude-plugin/fleet-skills/skills/comment-and-doc-style/SKILL.md	Mirrors comment-and-doc-style skill updates into the Claude plugin distribution.
.claude-plugin/fleet-skills/.source-digest	Updates the plugin source digest to reflect the regenerated content.
.agents/skills/repo-worktree/SKILL.md	Mirrors repo-worktree skill updates into the installed skills tree.
.agents/skills/comment-and-doc-style/SKILL.md	Mirrors comment-and-doc-style skill updates into the installed skills tree.

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated no new comments.