feat(apex): finalize ApexCode safety kernel and runtime gate v0.1

[kratosboom]

Final review closure v0.1

This Draft PR supersedes the review plan for PRs #1–#5 as a single owner-review candidate. It preserves their full ancestry and does not modify or resolve those older PRs.

Preserved ancestry

• PR feat(apex): bootstrap ApexCode safety and evaluation foundation #1 foundation: 07b14a9f361b7b098dc92a79f3620493b027fa07
• PR feat(apex): add role-separated orchestration foundation #2 orchestrator: b7ef600d571ade44936e487a0562b7d7c0302c32
• PR feat(apex): establish authenticated runtime trust boundary #3 former kernel: bae1efc121a158c91cab08b8ae4e7cfe4199e77f
• PR feat(apex): integrate first Codex runtime policy gate #4 runtime adapter: 3575971d7be163413a1abe9be71224b8d332e012
• PR docs(apex): publish safety and runtime evidence v0.1 #5 public evidence: e69e6cc5c8b1ff52954a6acc250aec1705688a02

Closure result

The 23 remaining historical review threads were re-evaluated against the cumulative PR #5 code:

• 12 reachable findings fixed with focused regressions
• 1 duplicate finding consolidated with the existing snapshot-allocation fix
• 3 findings obsolete on the final non-authoritative-observation / private-authority architecture
• 7 process, convention, or review-structure comments classified as not security findings

The final code checkpoint is aed18794421bf75deed3cdb8c90e94f47bf685d6. It contains source, test, CI, and repository-hygiene fixes only. The separate documentation checkpoint is 9e9d8840d2236fd9c62989e49f179e7806c3f140.

Validation

• Apex kernel: 76/76 PASS
• Apex workspace: 86/86 PASS
• Apex fmt: PASS
• Apex clippy, all targets/features, -D warnings: PASS
• git diff --check: PASS
• Security review: HIGH 0, MEDIUM 0, LOW 0
• R4 explicit release authority: PASS
• R5 default deny: PASS
• Separation of duties: PASS
• Stale evidence invalidation: PASS
• Upstream runtime source: unchanged
• Runtime adapter: 10/10 PASS
• Focused upstream integration: 3/3 PASS (existing PR feat(apex): integrate first Codex runtime policy gate #4 evidence; codex-rs unchanged)
• Nearest upstream filesystem regression: 14/14 PASS (existing PR feat(apex): integrate first Codex runtime policy gate #4 evidence; codex-rs unchanged)
• Blocked request invokes filesystem processor: NO
• Alternate fs/readFile bypass: ABSENT
• Adapter-disabled compatibility: PASS

A fresh local upstream rerun was attempted but could not start tests because the installed Windows GNU linker fails while resolving its user-profile path containing a space. No codex-rs source changed; the upstream counts above are explicitly carried forward from the unchanged PR #4 evidence.

The public docs update is documentation-only and makes no production-readiness claim. ApexCode contains no proprietary GPRO source. ApexCode is an independent open-source project based on OpenAI Codex, not an official OpenAI product and not endorsed by OpenAI. Apache-2.0 attribution and upstream provenance are preserved.

NO MERGE
NO FORCE PUSH
NO DEPLOYMENT
PRs #1–#5 remain unchanged.