[kmbroai]

Summary

Document the CLI implementation policy against adding or reintroducing secret and log redaction so future changes preserve diagnostic context for local troubleshooting.

Changes

• Add a focused section to the root AGENTS.md prohibiting CLI-layer secret and log redaction.
• Preserve upstream SDK and native Codex protections, credential handling safeguards, and controls on persisted or published artifacts.
• Reaffirm private handling and review of sensitive local output and the existing public disclosure requirements.

Testing

• git diff HEAD^ HEAD --check passed.
• Verified AGENTS.md is the only changed file.
• Compared the document with the added section removed against the base version; all pre-existing guidance is unchanged.
• Runtime tests were not run because this change only adds repository guidance.

Risk and rollout

Documentation only; this change does not alter runtime redaction, environment variables, SDK behavior, or native protections. It establishes guidance for future CLI implementation work. No release or rollout is required.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-01T19:23:37.578122Z	62c420e	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[soyeon-oai]

Reviewed against base 4096958. No blocking findings. The change is limited to 11 added lines in AGENTS.md, keeps all pre-existing guidance unchanged, and explicitly retains upstream protections and artifact/publication safeguards. Documentation-only review; no local runtime tests run. GitHub node-ci and title validation both passed.