Codex Destructive Guard v1.0.0

Warning

Superseded by v1.1.1.
Do not newly install or recommend v1.0.0. Its broad fail-closed description
overstates the Codex hook boundary, and later audits found coverage,
installer-ownership, and license-notice issues corrected in v1.1.1. The
original tag remains unchanged for auditability.

Initial public release of a dependency-free Codex PreToolUse guard. Blocks a
set of common destructive file, Git, disk, database, infrastructure, cloud,
patch, and MCP operations when Codex routes the visible call through the
trusted hook. Includes GitHub marketplace installation, a fallback installer,
15 unit tests, cross-platform CI, security documentation, and uninstall
instructions.