Skip to content

feat(vendors): Codex witness on codex_cli's loads_claude_plugins (CC-2c) - #212

Merged
jothimani-rajendran merged 1 commit into
mainfrom
cc-2c-codex-witness
Oct 18, 2026
Merged

jothimani-rajendran merged 1 commit into
mainfrom
cc-2c-codex-witness

Conversation

@jothimani-rajendran

Copy link
Copy Markdown
Collaborator

What this changes

codex_cli's loads_claude_plugins row gains witnessed, transcribed from org-plan witness/results/witness-codex-claude-plugin-2026-10-17.md at eb303f4 only: codex-cli 0.163.0 on Windows 11, 2026-10-17, plugin installed by codex plugin marketplace add <dir> then codex plugin add chock-witness@chock-local; guard (shell command) and gate (file write) refused by PreToolUse deny with its reason. Same pattern as #211: the witnessed-agents test table gains codex_cli, and the vendor JSON is regenerated with tools/recount_vendor_config.py --write (codex_cli's evidence test now points at the witness test).

Claim check

  • No capability claim is widened without a mechanism behind it (loads/hooks/deny_reply unchanged; the witness note says only what the result file shows)
  • No MATRIX row changed
  • Primary source: the owner's witness run, org-plan witness/results/witness-codex-claude-plugin-2026-10-17.md @ eb303f4

Checks

  • pytest -q passes (2626 passed, 6 skipped locally)
  • ruff check . and ruff format --check . pass
  • Runtime path is still stdlib-only
  • Commits are signed off

Notes for the reviewer

Not claimed (per the result file): the turn-end gate, hook trust prompts, Linux/macOS, other Codex versions. The row's "per-hook trust state unmeasured" note is left as is.


Generated by Claude Code

codex_cli's loads_claude_plugins row gains `witnessed`: codex-cli 0.163.0 on
Windows 11, 2026-10-17, plugin installed with `codex plugin marketplace add
<dir>` then `codex plugin add chock-witness@chock-local`; guard (shell) and
gate (file write) refused by PreToolUse deny with its reason (org-plan
witness/results/witness-codex-claude-plugin-2026-10-17.md at eb303f4).

The witnessed-agents test table gains codex_cli; the vendor JSON is
regenerated with tools/recount_vendor_config.py --write.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Jothi Mani Rajendran <250249270+jothimani-rajendran@users.noreply.github.com>
@jothimani-rajendran
jothimani-rajendran marked this pull request as ready for review October 18, 2026 00:05
@jothimani-rajendran
jothimani-rajendran merged commit 76e5e46 into main Oct 18, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant