Context

From schema consistency discussion #17876 (2026-02-23 run, finding 7).

Objective

Update the network reference documentation to accurately reflect that all four engines (Copilot, Claude, Codex, Gemini) support network/firewall features.

Issues to Fix

Outdated engine coverage statement

• File: docs/src/content/docs/reference/network.md (lines 10, 40, 186)
• Current text says: "Network permissions are currently supported by the Claude engine and the Copilot engine (when using the firewall feature)."
• Codex and Gemini both have supportsFirewall: true and dedicated default domain lists (CodexDefaultDomains in domains.go:40, GeminiDefaultDomains in domains.go:95).
• The "Implementation" section (line 186) only documents Copilot engine; Claude, Codex, and Gemini subsections are absent.

Changes Required

1. Update the engine support statement to list all four engines.
2. Add engine-specific subsections to the Implementation section documenting:
   • Codex engine: its default domain list and firewall behavior
   • Gemini engine: its default domain list and firewall behavior
3. Ensure consistency between the docs and schema description (after fixing the schema in a related issue).

Files to Modify

• docs/src/content/docs/reference/network.md

Acceptance Criteria

• The engine coverage statement lists all four engines (Copilot, Claude, Codex, Gemini)
• The Implementation section has subsections for each engine
• Default domain lists for each engine are referenced or documented
• Documentation follows the Diátaxis framework and GitHub-flavored Markdown

Generated by Plan Command for issue #discussion #17876

• expires on Feb 25, 2026, 12:04 PM UTC