[codex] Add public screenshot manifest

docs/SCREENSHOTS.md

@@ -0,0 +1,41 @@
+# Screenshot Plan
+
+No public screenshots are committed yet.
+
+Create real screenshots only from sanitized demo data. Run `scripts/privacy-audit.sh` before committing screenshot references, then manually inspect every image because the script cannot read pixels.
+
+## Demo Data Contract
+
+Use only these public-safe values while capturing screenshots:
+
+- Account names: `Work`, `Personal`, `Demo`.
+- Gateway host: `codepilot.example.com`.
+- Project names: `demo-ios-app`, `demo-gateway`, `demo-docs`.
+- Thread names: `Fix onboarding copy`, `Review gateway status`, `Draft beta notes`.
+- Upload examples: `sample-log.txt`, `demo-screenshot.png`, `release-notes.md`.
+
+Do not show real local paths, private repository names, prompts, hostnames, account identifiers, Apple IDs, team IDs, signing details, TestFlight account details, gateway bearer tokens, auth file contents, QR secrets, or live desktop content.
+
+## Beta Screenshot Manifest
+
+Capture the initial public beta set with these filenames under `docs/assets/screenshots/`:
+
+| File | Surface | Required safe state |
+| --- | --- | --- |
+| `mac-menu-status.png` | Mac menu bar status | Demo account usage only; no personal menu bar extras in frame. |
+| `mac-setup-checklist.png` | Mac setup checklist | Ready and optional states visible; no local paths or private account details. |
+| `mac-cloudflare-wizard.png` | Cloudflare wizard | Uses `codepilot.example.com`; no tunnel IDs, tokens, or dashboard account data. |
+| `ios-connection-cloudflare.png` | iPhone connection setup | Cloudflare mode only for public beta; no Same Network setup path shown. |
+| `ios-thread-list.png` | iPhone thread list | Demo thread and project names only. |
+| `ios-file-upload.png` | File upload confirmation | Demo filenames only; no document previews with private content. |
+| `ios-remote-desktop-permission.png` | Remote Desktop permission state | Pending or approval copy only; no live desktop pixels. |
+
+## Review Checklist
+
+Before committing or publishing screenshots:
+
+- Confirm every image uses the manifest filename and safe state above.
+- Inspect the full-resolution image, not only a thumbnail.
+- Verify no private names, email addresses, hostnames, local usernames, machine names, paths, tokens, account identifiers, repositories, prompts, Apple identifiers, or private screenshots appear.
+- Verify cropped windows do not expose private menu bar items, browser tabs, terminal prompts, desktop files, notifications, or status menus.
+- Update README, GitHub Pages, TestFlight, or App Store metadata only after the images pass this review and maintainer approval covers that use.

ops/agents/escalations/issue-triage.md

@@ -3,4 +3,6 @@
 Date: 2026-07-04
 
 - No active maintainer decision escalations for issue triage.
+- Follow-up check found no new GitHub issues created on 2026-07-04.
 - OTA build and public OTA asset verification are still required for the iOS changes, but were not run in this unattended pass because non-GitHub external system mutation is prohibited by the current public write policy.
+- Public screenshot capture remains pending; the manifest exists, but actual image capture still needs sanitized app/device state and manual pixel review before any public use.

ops/agents/triage/2026-07-04-issue-triage.md

@@ -15,14 +15,24 @@ Remote write policy: public GitHub writes are allowed after privacy audit when t
 - #8 Prepare sanitized public screenshot set
   - Current labels: `documentation`, `severity: low`.
   - Maintainer approval found for sanitized demo-only screenshots.
-  - Action: not captured in this pass; no screenshot assets were created or published.
+  - Action: created a dedicated screenshot manifest on branch `agent/issue-8-screenshot-plan` and opened draft PR #16; no screenshot assets were captured or published.
+
+## Follow-up Check - 2026-07-04
+
+- Checked open GitHub issues for `codepilotios/codepilot`: #2, #3, and #8 remain the only open issues.
+- Checked issues created on 2026-07-04: none found.
+- Confirmed draft PR #15 remains open for #2/#3 on `agent/issue-2-3-public-beta-setup`.
+- Confirmed draft PR #16 remains open for #8 on `agent/issue-8-screenshot-plan`; CI `Test and Audit` is passing.
+- Ran `scripts/privacy-audit.sh`: passed.
+- No new public GitHub writes were needed in this follow-up pass.
 
 ## Local Changes
 
 - Disabled Same Network from the iOS public beta connection picker and updated setup docs to point users to Cloudflare.
 - Changed Remote Desktop pairing so `pairing.complete` verifies the phone proof and returns `pending_mac_approval`; Mac approval is now required before the device is trusted.
 - Removed the unused iOS pairing-code field and kept Start Session disabled until refresh sees a paired Mac state.
 - Added focused Mac and iOS tests for public-beta connection modes and pending Mac approval.
+- Added `docs/SCREENSHOTS.md` on `agent/issue-8-screenshot-plan` so the README screenshot link resolves and the beta screenshot capture has fixed demo data, filenames, and manual privacy-review checks.
 
 ## Verification
 
@@ -34,4 +44,4 @@ Remote write policy: public GitHub writes are allowed after privacy audit when t
 ## Blockers
 
 - OTA build and public OTA asset verification require an allowed release/OTA run outside this issue-triage policy.
-- #8 screenshot capture remains launch work, but no maintainer decision is blocking it after the 2026-07-03 approval comment.
+- #8 screenshot capture remains launch work; the manifest is ready, but actual image capture still needs a sanitized app/device state and manual pixel review.