Codex capability boundary

This is source guidance, not an installed connector or a runtime proof. Resolve tools against the current host and read their actual schemas before using them. Preserve the named product and requested outcome. If a required operation is unavailable, report its exact name and leave that step incomplete. Do not invent tool names, connect accounts, install helpers, spend money, or broaden access from this document alone. Current operator authorization and native permissions govern every action.

Use native Codex delegation and the operator model policy. Missing named reviewers produce an incomplete review, never a clean verdict. Cursor plugins and built-in commands are not installed by this mirror. Read the adapted requirements reference before dependent work. Poteto owns its inline principle routing; no additional principle-pack-router pass is needed inside that workflow. System and developer instructions retain their priority. Existing operator authorization persists across turns unless withdrawn; do not ask again solely because a turn changed.

No sticky mode is claimed. Use native completion notifications for running workers. A recurring continuation requires the operator request and a supported native scheduling tool; do not emulate Cursor /loop.

Dyl review

Produce a draft PR review the human can paste. This is the one review: thermos and Bugbot run inside it at deep depth, never as separate steps.

Input: one or more PR links or numbers. Multiple PRs get one review block each.

Requires pstack, plus thermos at deep depth. Check first with ../cursor-dyl-mode/references/requirements.md. Missing → report the exact missing native capability and stop only the dependent step. Do not install a plugin automatically.

Forge. Use origin pr when the repo lives on Origin, gh pr otherwise. Commands below show both.

Depth