Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
User runs `dd-flow codex hooks install --target default --yes` and later uses Codex.
Impact
Can influence Codex Bash-tool and stop behavior for the selected project.
Mechanism
Explicit Codex hook configuration and session command guards.
Rationale
The package has a real explicit-user Codex control-surface mutation capability, requiring a warning under policy. Source inspection found no unconsented lifecycle mutation, payload execution, credential theft, or exfiltration.
Evidence
package.jsondist/cli.jsdist/cli/run-cli.jsdist/services/hooks.jsdist/services/status.js