Contributions are welcome, especially minimal reproductions for missed destructive commands or avoidable false positives.
Before opening a pull request:
- Add or update a case in
tests/cases/guard_cases.jsonfor every policy change, false positive, or missed command. - Run
python3 -m unittest discover -s tests -v. - Run both
python3 scripts/validate_repo.pyandpython3 -O scripts/validate_repo.py. - Test plugin discovery with the Codex CLI version pinned in CI.
- Optionally run
python3 scripts/benchmark_guard.py. - Do not include secrets, production endpoints, or destructive live tests.
Policy changes should prefer clear, reviewable regular expressions. Avoid network access, telemetry, opaque dependencies, and automatic execution of user-provided code.