Harness refresh follow-ups: GITHUB_PROJECT_AUTOMATION MCP-fallback wording, chrome-devtools-mcp pin parity

[Chris0Jeky]

LOW findings from the independent review of #2366/#2367/#2369, tracked instead of fixed in-round (law 2). (1) docs/GITHUB_PROJECT_AUTOMATION.md line ~156 still describes the scripts/github/* helpers as fallbacks for GitHub MCP gaps; with GitHub MCP removed from .mcp.json they are Claude's primary path - runtime-qualify the sentence. (2) .mcp.json pins chrome-devtools-mcp@1.8.0 while .codex/config.toml still uses @latest; either pin both or say in docs/MCP_TOOLING_GUIDE.md section 0.1 that the DevTools version is per-runtime. (3) Optional: an executable negative control for the unwind path in Test-Assert-TaskdeckCheckoutFingerprint.ps1 replacing the removed AFTER-TRY-RAN marker. Refs #1291, #1138.

[Chris0Jeky]

Claiming bounded lane alpha-product-trust / TD-2370-runtime-wording from base 9cf28bbc60925344c77a8cdaed9ad8cc37064634. Scope: truthfully qualify the GitHub helper sentence in docs/GITHUB_PROJECT_AUTOMATION.md for the configured Codex-versus-Claude paths. Owned path: that file only. The chrome-devtools version mismatch, .codex/config.toml, .mcp.json, and executable fingerprint guard remain out of scope.

[Chris0Jeky]

Released bounded slice TD-2370-runtime-wording in PR #2641: #2641

• commit 0b394b306ccd862960bc279ab5fc67acebf9de5d
• one-line correction in docs/GITHUB_PROJECT_AUTOMATION.md
• docs governance, golden principles, and diff hygiene checks passed
• two coordinator review passes found no blocking findings
• DevTools pin parity and fingerprint guard remain separate rows

Automatic Codex review is unavailable because the account review quota is exhausted. No merge performed.

[Chris0Jeky]

Coordinator note (2026-09-05, D-12 sweep): the Codex session's PR on this issue was reviewed by one fresh-context Opus 5 reviewer (record on the PR), fixed in-PR where the review found a MEDIUM, and merged with a merge commit. The PR body used Refs, so this issue stays open; what merged and what remains:

• PR #2641 merged as 00e9b0fc6: the docs/GITHUB_PROJECT_AUTOMATION.md helper paragraph is qualified by runtime. After the review round it says Claude has no project GitHub MCP (.mcp.json omits it on purpose, 2026-09-02) and reaches GitHub through gh, using the helpers where their specific shape is needed, which matches docs/MCP_TOOLING_GUIDE.md; the first version had called the helpers Claude's primary path, which contradicted that guide. The Codex REST/CLI fallback wording is unchanged. Remaining: the DevTools pin-parity and fingerprint-guard rows. LOW: the Claude sentence sits inside the "Codex Batch Helpers" section.