Security fixes are applied to the latest code on the default branch.

Please use the repository's private Security advisories reporting flow. Do not open a public issue for a vulnerability or include credentials, raw session logs, prompts, responses, or thread identifiers in a report.

Include a minimal reproduction, affected macOS and Codex versions, and the security impact. Sanitize all local paths and identifiers.

RehireBar is a local helper. It reads bounded local Codex status/session metadata and communicates with local Codex processes. It is not designed to accept network connections. Task navigation validates the target thread UUID, and approval delivery fails closed unless the local Codex Desktop endpoint confirms the exact thread.

Custom Agent status files are local inputs: each JSON document is limited to 1 MiB. The reader pins its directory and file descriptors, rejects symlinks and non-regular files, and isolates invalid documents. Provider URLs are opened only after a task tap; install integrations you trust.

Application update checks are user-initiated HTTPS requests to the configured release feed. Sparkle validates Ed25519 signatures on the feed and update archive; archive verification before extraction is enabled. Feed-signature failures do not expire into an unsigned fallback. The application includes only the public key; the publisher keeps the private signing seed outside the source tree.

Background update checking, automatic installation, and system profiling are off by default. Update requests do not include project files, prompts, responses, or task identifiers. A compromised or damaged update must fail validation rather than replace the installed application.