Codex Guard v1.14.0
Local confidence and easier rollout.
Highlights:
- New read-only codex-guard doctor command validates workflow YAML, PR triggers, Action steps, permissions, policy keys and policy values.
- New observe, balanced, and strict installer presets; --strict remains compatible.
- Local --git scans now include non-ignored untracked files before git add.
- Binary and untracked files larger than 8 MiB are reported as unscanned.
- Quoted policy booleans are coerced correctly, and todo-blocking now maps to the correct internal option.
- Marker-shaped identifiers no longer create false unfinished-work findings.
- Terminal output is sanitized and exported source context is bounded.
Validation: 136 tests, Node 22/24 CI, coverage, manifest validation, Markdown lint, package audit, and tarball install smoke tests all passed.