codex-zdr

name	codex-zdr
description	Zero Data Retention mode for sensitive/proprietary code - no code stored on OpenAI servers
allowed-tools	Bash, Read, Write, TodoWrite

Codex Zero Data Retention (ZDR) Skill

---

LIBRARY-FIRST PROTOCOL (MANDATORY)

Before writing ANY code, you MUST check:

Step 1: Library Catalog

• Location: .claude/library/catalog.json
• If match >70%: REUSE or ADAPT

Step 2: Patterns Guide

• Location: .claude/docs/inventories/LIBRARY-PATTERNS-GUIDE.md
• If pattern exists: FOLLOW documented approach

Step 3: Existing Projects

• Location: D:\Projects\*
• If found: EXTRACT and adapt

Decision Matrix

Match	Action
Library >90%	REUSE directly
Library 70-90%	ADAPT minimally
Pattern exists	FOLLOW pattern
In project	EXTRACT
No match	BUILD (add to library after)

---

Purpose

Execute Codex with Zero Data Retention for sensitive, proprietary, or regulated code where no data should be stored on OpenAI servers.

Unique Capability

What This Provides:

• No code retention: Code not stored on OpenAI servers
• Privacy-first: GDPR, HIPAA compatible
• Regulated industries: Suitable for healthcare, finance
• Proprietary code: Safe for trade secrets

When to Use

Perfect For:

• Medical/healthcare code (HIPAA)
• Financial systems (PCI-DSS)
• Proprietary algorithms
• Trade secrets
• Government contracts
• Client code under NDA

Trade-offs:

• Slightly slower (no caching)
• Same functionality otherwise

Usage

# ZDR for sensitive code
/codex-zdr "Implement medical record encryption"

# ZDR with full-auto
/codex-zdr "Build payment processing module" --full-auto

# ZDR with sandbox
/codex-zdr "Audit financial calculations" --sandbox

CLI Command

codex --zdr "Your sensitive task"

# Combined with full-auto
codex --full-auto --zdr "Build and test"

# Via script
CODEX_MODE=zdr bash scripts/multi-model/codex-yolo.sh "Task" "id" "." "5" "zdr"

Compliance Notes

Regulation	ZDR Suitability
GDPR	Compliant
HIPAA	Compliant
PCI-DSS	Suitable
SOC 2	Suitable
FedRAMP	Check specifics

Memory Integration

• Key: multi-model/codex/zdr/{task_id}
• Note: Only metadata stored locally, no code in memory