---
name: securedme-ffed-qlc-codex-adapter
description: Use for Codex/OpenAI browser-authenticated adapter work in the FfeD-QLC Education app. Route app context through secret-safe WebAuth templates, preserve pre-alpha school governance, and prepare future Token Governor and MCP handoffs without storing tokens, cookies, sessions, API keys, or .env contents.
---

# FfeD-QLC Codex Adapter

Generated by SecuredMe Education adapter scaffold.

Use this skill to operate the repo-local Codex adapter for `FfeD-QLC-MVP`.

## App Contract

- Canonical domain: `https://ffed-qlc.securedme.ca`.
- Status: `pre-alpha` until app-specific validation is complete.
- Official Codex/OpenAI route: browser-authenticated Codex or ChatGPT account workflow.
- Sister Antigravity/Gemini route: use the `.antigravity` adapter as context, not as a secret bridge.
- Do not store or copy OAuth tokens, cookies, browser sessions, API keys, or `.env` values.
- Do not require student API keys.

## Required Local References

- WebAuth template: `.codex/webauth-template.json`.
- Future Token Governor bridge: `.codex/securedme-adapter-map.json`.
- Future MCP route: declared as planned only; no MCP server is connected by this scaffold.
- Read `AGENTS.md` before changing app policy.
- Read `SECURITY.md` before changing app policy.
- Read `SCHOOL_TOOL_GOVERNANCE.md` before changing app policy.

## Operating Rules

1. Keep stable system context before variable app context.
2. Keep large app state as local artifact pointers or metadata, not visible transcript content.
3. Preserve `I -> I_system^S -> D_f -> dF -> i_fractal` when math or neutrosophic state appears.
4. Use the gateway template at `FNP-QNN-MVP/fnpqnn_gateway_MVP` for WebAuth behavior.
5. Never rewrite the official school mechanism from this app adapter.
6. Preserve the QLC Penrose contract: source URLs are function provenance, Source Graph is secondary, and lattice tiles must be validated thin/thick rhombi.
7. Keep CPAI/YOLO metadata-only; do not copy CodeProject AI Server and do not start training without explicit UI confirmation.
8. Reject Ollama as an official school route for this adapter.