AutoHarness for Codex 1.3.1

This release fixes all P1 items from the upstream issue comparison and rebuilds every installer with the corrected plugin.

• Preserve inner frontmatter quotes and reject duplicate, multiline or ambiguous metadata.
• Allow inert exec()/eval() documentation and directly negated warnings while rejecting executable calls and misleading warnings.
• Fail CI for empty, insufficient, failing or entirely skipped test suites.
• Decode JSON before privacy filtering; remove PEM bodies across string fields, records and capture windows, including escaped markers and clipped JSON.
• Add common-issuer/Luhn payment-card filtering with negative timestamp and identifier fixtures.
• Keep docs/ local and ignored; remove installer build instructions from README.

Download the Windows x64 Setup.exe, macOS arm64 DMG for Apple Silicon, or macOS x86_64 DMG for Intel. Installed users do not need Python. Portable ZIPs and SHA256 manifests are also attached.

Validation: all nine CI jobs passed on commit f48cd10314c59918b33e5c74442e1d94cc98be53. CI collected 77 tests on Windows, Ubuntu and native macOS. Both macOS architectures exercised bundled hooks/MCP, detached workers, real Codex registration, repair and unregister while preserving knowledge. The exact Windows release installer additionally passed silent installation, repair and uninstall with a real Codex CLI in an isolated profile without Python on PATH.

Native GUI dialogs were not driven interactively. Windows remains unsigned; macOS uses ad-hoc signatures without Developer ID/notarization. Card filtering is a heuristic, not universal detection or a guarantee against every identifier collision. Existing learned rules are not silently rewritten by upgrading the plugin.

Hook trust stays under your control. Check the SHA256 manifest and the attached verification.json for artifact and validation details.