S00-030: Record blocked task and remediation handoff

Changes: Preserve incomplete work and blocker metadata for S00-030. This checkpoint does not mark implementation accepted.
Validation: Session ended with status blocked.
Blocker: S00-030 no-model sandbox diagnostic still exits 1 before execution with the original socket directory ownership/mode guard, despite XDG_RUNTIME_DIR being user-owned mode 0700. Actual socket directory repair requires host owner input.
Automatic blocker limit reached; explicit external resolution required.

Task: S00-030
Agent: auto-ci-cd-d37c9faf28f3
Role: ci-cd
Action: claim
Status: blocked

Task title: Provide a valid Codex sandbox app-server socket directory

state/blockers/S00-031.md

@@ -0,0 +1,23 @@
+# Blocker S00-031
+
+- Original task: S00-030
+- Root task: S00-005
+- Reporter: auto-ci-cd-d37c9faf28f3
+- Role: ci-cd
+- Original owner: auto-ci-cd-d37c9faf28f3
+- Waits for user/external condition: True
+
+## Cause
+
+S00-030 no-model sandbox diagnostic still exits 1 before execution with the original socket directory ownership/mode guard, despite XDG_RUNTIME_DIR being user-owned mode 0700. Actual socket directory repair requires host owner input.
+Automatic blocker limit reached; explicit external resolution required.
+
+## One remediation outcome
+
+Host owner supplies a verified valid actual app-server socket directory and a fresh no-model Codex sandbox probe passes under unchanged project write restrictions.
+
+## Evidence / reproduction
+
+Run codex -c sandbox_mode="workspace-write" -c sandbox_workspace_write.network_access=true sandbox -- python3 -c <synthetic probe>; exit 1: app-server socket directory must be a user-owned directory with mode 0700. See state/evidence/S00-030-auto-ci-cd-d37c9faf28f3.md.
+
+The reporting agent must stop now. A new agent implements only S00-031.