S00-030: Approve the bounded host-context sandbox diagnostic

Changes: Record independent S00-030 QA acceptance and append the verified result to its handoff.
Validation: Inspected executor diff/message and probe hash; approved host wrapper and inner workspace-write probe exit 0, project write/read/remove passed and outside write denied EROFS 30. make check exit 0 with 72 tests; git diff --check exit 0. No additional model/storage task ran; acceptance is limited to this host/version and one filesystem boundary.

Task: S00-030
Agent: auto-qa-a9442b15e749
Role: qa
Action: review
Status: done

Task title: Provide a valid Codex sandbox app-server socket directory

planning/stages/S00.md

@@ -32,9 +32,9 @@
 - [S00-025](../tasks/S00-025.md): Устранить прерывание: Устранить прерывание: Выбрать IndexedDB wrapper и migration policy — storage; blocked.
 - [S00-026](../tasks/S00-026.md): Provide approved access to the pinned Linux experiment artifacts — ci-cd; done.
 - [S00-027](../tasks/S00-027.md): Restore approved npm registry connectivity for the OMEMO2 backend investigation — ci-cd; done.
-- [S00-028](../tasks/S00-028.md): Repair conflicting Codex harness sandbox arguments — ci-cd; blocked.
+- [S00-028](../tasks/S00-028.md): Repair conflicting Codex harness sandbox arguments — ci-cd; todo.
 - [S00-029](../tasks/S00-029.md): Record an approved browser OMEMO backend sourcing strategy — orchestrator; blocked.
-- [S00-030](../tasks/S00-030.md): Provide a valid Codex sandbox app-server socket directory — ci-cd; review.
+- [S00-030](../tasks/S00-030.md): Provide a valid Codex sandbox app-server socket directory — ci-cd; done.
 - [S00-031](../tasks/S00-031.md): Supply a verified private Codex app-server socket environment — ci-cd; done.
 - [S00-010](../tasks/S00-010.md): Gate: Профиль и проверка стека — qa; todo.