codex-exec-review

name	codex-exec-review
description	Use before presenting implementation plans and after non-trivial commits that require review. Runs codex exec in read-only review mode, handles resume, MCP transport errors, and review timeout semantics.

Codex Exec Review

Required Gates

• Before presenting an implementation plan to the user, run codex exec to review the plan.
• After a non-trivial commit, run codex exec to review the committed change.
• Repeat review up to 3 times. Stop when no critical issue remains.
• Do not replace a required review with local tests or your own judgment.

Review Command Rules

• Invoke as command codex exec ..., not codex exec .... This user's shell has alias codex='codex --yolo' (~/dotfiles/common.sh), which silently overrides --sandbox — verified empirically: a run through the alias showed sandbox: danger-full-access even with --sandbox read-only passed. command codex bypasses the alias. Check the run header's sandbox: line to confirm read-only actually took effect.
• Use --sandbox read-only.
• For codex exec resume, --sandbox is not available. Use -c 'sandbox_mode="read-only"' and check the run header. If the header is anything other than sandbox: read-only, stop using that resumed run for the required review and rerun the review with a fresh command codex exec --sandbox read-only ... invocation.
• Use -c model_reasoning_effort=medium only for review runs.
• Use -c service_tier=fast and when appropriate.