Please report vulnerabilities privately through GitHub's security advisory feature rather than a public issue.

The wheel reads local Codex task metadata through an experimental app-server process. AI summaries are disabled by default. When explicitly enabled, clipped recent task text is processed through the user's existing Codex session and may consume normal account usage. Best-effort secret-pattern redaction is not a guarantee.

The repository must never contain raw app-server logs, task transcripts, credentials, signing certificates, provisioning profiles, or developer-specific environment files.