security(codex): pin vendor binary SHA-256 on first use and verify on load (#1245)#1250

Open

shaun0927 wants to merge 28 commits intocoleam00:devfrom

shaun0927:security/codex-binary-sha256-pinning

Commits on Apr 23, 2026

fix(providers/test): use os.homedir() instead of $HOME in claude binary autodetect test

coleam00
and
claude
committed
fix(server): contain Discord login failure so it doesn't kill the server (#1365)

coleam00
and
claude
committed

Commits on Apr 24, 2026

docs(script-nodes): dedicated guide + teach the archon skill (#1362)
Wirasm
authored
docs/skill: general hardening — fix inaccuracies, fill workflow/CLI/env gaps, add good-practices + troubleshooting (#1363)
Wirasm
authored
chore(workflows): switch default Opus pin to opus[1m] alias (#1395)
Wirasm
authored
fix(workflow): migrate piv-loop plan handoff to $ARTIFACTS_DIR (#1398)

coleam00
and
claude
authored
test(workflows): add anyFailed status derivation coverage for DAG executor (#1403)
coleam00
authored
docs/skill: add parameter-matrix.md quick-lookup reference
coleam00
committed

Commits on Apr 27, 2026

Commits on Apr 28, 2026

security(codex): pin vendor binary SHA-256 on first use and verify on load (#1245)
shaun0927
committed