Auto Review

Run the bundled Codex structured review helper as a closeout check. Treat the result as advisory: verify every finding against the real code before changing files, and reject speculative or over-broad findings.

Contract

• Use only the bundled helper; do not run nested review commands.
• The helper uses codex exec instead of codex review so it can enforce structured JSON output and deterministic pass/fail behavior.
• Review the intended diff target, not a clean checkout by accident.
• Keep going until the final helper run reports no accepted/actionable findings.
• If a review-triggered fix changes code, rerun focused tests and rerun the helper.
• Report security findings only for concrete, actionable risks introduced or exposed by the change.
• Do not push just to review. Push only when the user requested push, ship, or PR update.

Pick Target

Dirty local work: