docs: distinguish Codex and Feishu write permissions

capabilities/am516-delivery-prediction/docs/deployment_checklist.md

@@ -15,8 +15,10 @@
 - [ ] Git remote, branch, update, and rollback mechanisms are constructed by TH8.
 - [ ] TH8 is the supporting IT department, but its project responsibility is limited to Git construction and excludes AM516 rules, functional implementation, network access, account permissions, secrets, and outbound approval.
 - [ ] Branch and update method are confirmed.
+- [ ] Mac Studio Codex has project write permission for AR51-assigned work through direct non-Feishu local entry points, including Codex automations or scheduled tasks and the required Git operations.
 - [ ] The Feishu runtime account has read-only access to the project tree except append access to `records/delivery_prediction_records.md` and approved non-project log storage.
 - [ ] Project edits through Feishu are prohibited without exception; AR51-authorized rule and function changes are made outside Feishu and synchronized through Git.
+- [ ] Permission checks distinguish the request entry point: Feishu requests do not inherit local Codex write permission even when Codex is the underlying executor.
 - [ ] Rollback method is confirmed.
 
 ## 3. Secrets
@@ -44,4 +46,5 @@
 - [ ] Invalid model stops with a clear parse failure.
 - [ ] Output includes the fixed internal-candidate disclaimer.
 - [ ] Records append to `records/delivery_prediction_records.md`.
+- [ ] A direct AR51 task in Mac Studio Codex can modify a test project file or perform the intended Git update without being blocked by the Feishu read-only rule.
 - [ ] A Feishu request to modify a rule or other project file is refused and leaves all project files unchanged.