Tighten Codex marketplace route rejections

[kriptoburak]

Summary

• Reject personal Claude Code/Codex plugin marketplaces, source-owned first-party plugin bundles, already-merged catalog listings, and marketplace-keyword app repos without third-party catalog lanes.
• Add route-rejection fixture coverage for the new discovery patterns while keeping the submission checklist at 960 lines.

Discovery

• Full PR audit: /tmp/hermes-tweet-open-prs-20260621-1513.json and /tmp/hermes-tweet-pr-audit-20260621-1513.jsonl, 427 PRs, 0 errors, no capped shards.
• Crawler: /tmp/hermes-tweet-20260621-1513-toolcatalog-crawl.json, parsed successfully, 7 candidates rejected as non-native app/product repos.
• Direct discovery found only duplicate or non-native routes, including g-bastianelli/nuthouse already covered by open PR Sync media download MPP catalog metadata #44 and just-every/plugins already merged via PR Bump actions/checkout from 4 to 6 #2.

Validation

• uv run --python 3.12 --extra dev pytest tests/test_submission_readiness.py
• uv run --python 3.12 --extra dev python scripts/check_public_safety.py
• uv run --python 3.12 --extra dev pytest tests/test_public_safety.py
• uv run --python 3.12 --extra dev ruff format --check
• uv run --python 3.12 --extra dev ruff check
• uv run --python 3.12 --extra dev pip-audit
• git diff --check

Note

Add four new rejection categories to Codex marketplace route policy

Extends the submission rejection criteria in SUBMISSION_READINESS.md with four new disallowed catalog types: personal Claude Code/Codex plugin marketplaces, first-party/source-owned plugin bundles, previously merged catalog listings, and repos identified primarily by marketplace keywords. Also adds app implementations as a disqualifying context. Corresponding phrases are added to the agent_runtime.txt test fixture so automated checks cover the new categories.

^{Macroscope summarized ba25e21.}