Add Codex repository baseline

docs/agent-handoff.md

@@ -0,0 +1,40 @@
+# Agent Handoff
+
+Use this file when a task spans multiple sessions, has unresolved follow-up work, or changes release behavior.
+
+## Current State
+
+```text
+Codex repository baseline added. Implementation code, stack, commands, CI, and release artifacts are still pending.
+```
+
+## Changes Made
+
+- Added agent context files.
+- Added repository security and release documentation.
+- Added baseline README and ignore rules.
+
+## Verification
+
+| Check | Result |
+| --- | --- |
+| `git diff --check` | Pending until the directory is a Git repository |
+| lint | Not available |
+| test | Not available |
+| build | Not available |
+
+## Open Questions
+
+- Which implementation stack should Robocopy_Overhaul use?
+- Which build, test, lint, and audit commands should become authoritative?
+- Should Gitea CI workflows be added after the stack is known?
+
+## Next Steps
+
+- Add implementation code.
+- Update `AGENTS.md` and `.codex/project.md` with real commands and artifact paths.
+- Add CI workflows once commands can run.
+
+## Risks
+
+- No code-level security or release behavior can be validated until implementation exists.

docs/release-checklist.md

@@ -0,0 +1,35 @@
+# Release Checklist
+
+## Version
+
+- [ ] Version number updated.
+- [ ] Changelog updated.
+- [ ] README updated.
+
+## Quality
+
+- [ ] Working tree is clean.
+- [ ] Lint/type checks pass or are documented as unavailable.
+- [ ] Tests pass or missing tests are documented.
+- [ ] Build succeeds in CI once CI exists.
+
+## Security
+
+- [ ] Security review is current.
+- [ ] Dependency audit is clean or documented once dependencies exist.
+- [ ] No secrets are committed.
+- [ ] Release artifacts do not contain local config files.
+
+## Artifacts
+
+- [ ] Artifacts are uploaded if the project produces artifacts.
+- [ ] Download links work if downloads are published.
+- [ ] Package registry links work if used.
+- [ ] Installer/portable/archive naming is clear if applicable.
+
+## Release
+
+- [ ] Git tag created.
+- [ ] Release notes written.
+- [ ] Release published.
+- [ ] Post-release download smoke test completed.

docs/release-notes.md

@@ -0,0 +1,28 @@
+# Robocopy_Overhaul Unreleased
+
+## Downloads
+
+No release artifacts are published yet.
+
+## Highlights
+
+- Added Codex Agent Repository Kit baseline files.
+
+## Security
+
+- Dependency audit: not applicable until dependencies exist.
+- Secret handling: baseline `.gitignore` excludes common local config and secret files.
+- External network calls: no project implementation exists yet.
+
+## Verification
+
+| Check | Result |
+| --- | --- |
+| lint | Not available |
+| test | Not available |
+| build | Not available |
+| Artifact download | Not available |
+
+## Notes
+
+This repository is not release-ready until implementation code, commands, CI, and artifacts are defined.

docs/security-review.md

@@ -0,0 +1,54 @@
+# Security Review
+
+## Scope
+
+Project:
+
+```text
+Robocopy_Overhaul
+```
+
+Reviewed version or commit:
+
+```text
+Baseline before implementation code.
+```
+
+## Code Patterns Checked
+
+- [x] No `eval` in project source. No project source exists yet.
+- [x] No dynamic `Function` constructor. No project source exists yet.
+- [x] No unsafe HTML injection. No project source exists yet.
+- [x] No unexpected shell execution. No project source exists yet.
+- [x] No unexpected external network calls. No project source exists yet.
+- [x] No secrets committed in baseline files.
+- [x] No unsafe file writes outside expected user-selected paths. No project source exists yet.
+
+## Dependency Review
+
+Command:
+
+```text
+PENDING: no dependency manifest exists yet.
+```
+
+Result:
+
+```text
+Not applicable for the baseline.
+```
+
+## Runtime Review
+
+- [ ] Least-privilege runtime configuration. Pending until runtime exists.
+- [ ] External URLs documented. Pending until implementation exists.
+- [ ] Local data storage documented. Pending until implementation exists.
+- [x] Sensitive data is not persisted by baseline files.
+
+## Release Notes
+
+Known residual risks:
+
+```text
+No implementation risk has been reviewed yet because no application code exists.
+```