S00-031: Record newly available external input for independent verification

Changes: Release external waiting state for S00-031 through tasks.py. Input: New verified root cause and supported host execution context supplied in state/handoffs/S00-031.md. Actual host /tmp/codex-daemon-1000 uid1000/mode0700 is valid; outer sandbox deliberately masks it read-only mode000. Installed-version primary source confirms this design; TMPDIR/no-daemon cannot fix nested guard. Approved OUTER HOST EXECUTION of bounded no-model inner codex workspace-write probe passes project write/read/remove and denies outside write EROFS30, no outside file created. No socket mutation or broader roots. Fresh executor/QA must read handoff, request approved outer host execution and independently repeat, document and review; no task acceptance claimed.
Validation: External input availability checked; tasks.py release-external succeeded. Acceptance and dependent tasks remain unverified pending fresh executor and independent review.

Task: S00-031
Agent: coordinator-input-s00-031
Role: orchestrator
Action: release-external
Status: todo

Task title: Supply a verified private Codex app-server socket environment

planning/TASK_MATRIX.md

@@ -1,6 +1,6 @@
 # Матрица задач
 
-Generated; state revision **96**. Canonical status: state/tasks.json.
+Generated; state revision **97**. Canonical status: state/tasks.json.
 
 | ID | Этап | Оператор | Reviewer | Статус | Owner | Зависимости | Задача |
 | --- | --- | --- | --- | --- | --- | --- | --- |
@@ -33,7 +33,7 @@ Generated; state revision **96**. Canonical status: state/tasks.json.
 | [S00-028](tasks/S00-028.md) | S00 | ci-cd | qa | blocked | auto-ci-cd-211cf3a2bd08 | S00-002, S00-030 | Repair conflicting Codex harness sandbox arguments |
 | [S00-029](tasks/S00-029.md) | S00 | orchestrator | security | blocked |  | S00-001, S00-002, S00-021, S00-027 | Record an approved browser OMEMO backend sourcing strategy |
 | [S00-030](tasks/S00-030.md) | S00 | ci-cd | qa | blocked | auto-ci-cd-d37c9faf28f3 | S00-002, S00-031 | Provide a valid Codex sandbox app-server socket directory |
-| [S00-031](tasks/S00-031.md) | S00 | ci-cd | qa | blocked |  | S00-002 | Supply a verified private Codex app-server socket environment |
+| [S00-031](tasks/S00-031.md) | S00 | ci-cd | qa | todo |  | S00-002 | Supply a verified private Codex app-server socket environment |
 | [S00-010](tasks/S00-010.md) | S00 | qa | orchestrator | todo |  | S00-001, S00-002, S00-003, S00-004, S00-005, S00-006, S00-007, S00-008, S00-009 | Gate: Профиль и проверка стека |
 | [S01-001](tasks/S01-001.md) | S01 | orchestrator | security | todo |  | S00-010 | Описать identity/model contracts |
 | [S01-002](tasks/S01-002.md) | S01 | orchestrator | security | todo |  | S00-010, S01-001 | Описать async account context |