Execution Fidelity Guard v0.1.0 - Public Preview
Execution Fidelity Guard v0.1.0 is an Apache-2.0 public preview of a local-first Codex plugin for explicit task-action gates, minimal decision receipts, and evidence-aware completion checks.
Highlights
- Self-hosted Git marketplace packaging with zero runtime dependencies.
- Shadow, balanced, and off modes; safe shadow default.
- Deterministic install, publish, external-side-effect, destructive, and workspace-write classifiers with positive and negative regressions.
- Strict provider-envelope and seven-field TaskContractLite validation with canonical SHA-256 binding.
- Content-minimized receipts, caller-attested manual evidence, bounded Stop checks, retention, and exact-session deletion.
- Frozen Intent Loop, Continuity, Guard, and Host ownership contract.
Validation
- 55/55 local tests passed.
- 257 release checks passed; 25 plugin files; 0 runtime dependencies.
- GitHub Actions passed on Windows and Ubuntu with Node 20 and 22.
- Adversarial and hands-on user reviews both returned GO after blocker remediation.
- The de-identified 41-failure/40-success inventory proves coverage only, not runtime efficacy or outcome improvement.
Known limits
- This is defense in depth, not a sandbox, authorization service, or complete shell interpreter.
- Live Intent Loop and Continuity bridges, installed-client discovery, and end-to-end installed Hook delivery were not verified.
- Hosted and specialized tool interception is incomplete; indirect scripts and wrappers can hide behavior.
- Hook exceptions fail open, manual CLI evidence is caller-attested, and concurrent Stop processes can race.
- The final Windows source benchmark measured 140.41 ms p95 with persistence disabled, above the provisional 100 ms target; installed-client, macOS, and Linux latency are unmeasured.
Install after reviewing the Hook commands:
codex plugin marketplace add rrrrrredy/execution-fidelity-guard --ref v0.1.0
codex plugin add execution-fidelity-guard@execution-fidelity-guard