vpnshi1340-png /
codex-verification-layer-assistant
Production-Ready Codex Verification Layer 2026: Hooks & Behavior Automation
53/100 healthLoading repository data…
lyomagit / repository
Production-ready behavior, hooks, and verification layer for OpenAI Codex.
A transparent discovery signal based on current public GitHub metadata.
This score does not audit code, security, maintainers, documentation quality, or suitability. Verify the repository and its current documentation before adoption.
Production-ready behavior, hooks, and verification layer for OpenAI Codex.
Codex-Claude Unison gives Codex a durable engineering discipline layer: read before editing, make the smallest correct change, verify before claiming success, preserve user content during replacement, and report failures honestly.
It is not just a prompt. It is an installable cross-platform package containing:
AGENTS.md behavior rules;codex-claude-unison skill;.codex-hybrid/ project profile and inventory;The package identity is stable: codex-claude-unison.
AI coding agents are useful, but production work needs operational discipline. The most damaging failure mode is not imperfect code generation; it is an agent claiming a check passed when it did not, losing context during long work, or blocking legitimate developer actions because it matched scary text instead of real evidence.
Codex-Claude Unison was built to reduce those failures.
The project evolved as a practical safety-filter and behavior layer while Codex-style agent and hook workflows were still actively forming. Its focus is shell outcomes, verification honesty, destructive-action guardrails, context hygiene, and clean installation.
Selected from shared topics, language and repository description—not editorial ratings.
vpnshi1340-png /
Production-Ready Codex Verification Layer 2026: Hooks & Behavior Automation
53/100 healthtools/verify_bundle.py --json checks the package and fixtures.This repository contains the unpacked bundle source and a releasable archive payload.
codex-claude-unison-portable-full-20260517-v3.1.1.zip.For both a human operator and an AI coding agent, the entrypoint is:
Read HOW_TO.md first.
HOW_TO.md explains the exact bootstrap command, replacement behavior, hookless mode, dry-run mode, and verification step. Do not start by copying individual files by hand unless you are intentionally doing a manual audit.
Minimal deployment flow:
HOW_TO.md.HOW_TO.md in the workspace where the behavior layer should be installed..codex-hybrid/profile.md, .codex-hybrid/mapping.md, and .codex-hybrid/inventory.json.HOW_TO.md and report any failed check honestly.If you only have the zip file, extract it first, then follow the same HOW_TO.md entrypoint from the extracted directory.
It is designed for one workflow:
Read HOW_TO.md and self-bootstrap this bundle into the current workspace.
Codex should then run the portable bootstrap, backup any old managed Unison/hybrid install, replace it with this full package, regenerate .codex-hybrid/profile.md, .codex-hybrid/mapping.md, and .codex-hybrid/inventory.json, and continue the real task under the generated project contract.
It gives Codex a durable engineering discipline layer:
AGENTS.md behavior rules;codex-claude-unison skill;.codex-hybrid/;v3.1.1 is a packaging and repository-polish release. It does not change the hook runtime policy intent from v3.1.
__pycache__ directories are excluded from the bundle.bash -lc wrappers consistently with macOS/Linux.v3.1 is the production-readiness hardening pass on top of v3.0. It keeps the replacement installer model and makes the hook layer more precise: fewer false positives, broader real-risk coverage, and safer migration behavior.
$(...) and backticks, while still ignoring the same text inside single-quoted search/doc strings./home/alice or C:\Users\Alice remain hard denials, but scoped project paths such as /home/alice/project/build are warning-only so legitimate cleanup is not blocked.Remove-Item -Recurse -Force, PowerShell rm aliases, and rmdir /s /q / rd /s /q get the same deny-vs-warn policy as POSIX rm.dd: shell redirection to /dev/sd* / /dev/nvme* and tee to raw devices are denied.curl ... | sh produce a warning instead of a denial, preserving legitimate installs while forcing explicit trust reasoning.status/reason fields; they require explicit error-like fields.Bash where the Codex runtime emits them.hooks.json pruning is safer: unrelated hooks with similar filenames are preserved unless they are clearly managed Unison hooks.py to python3/python and quote configured Python paths.v3.1 also keeps the v3.0 fixes: stdout/stderr words are not failure evidence, expected probe exits are informational, successful verification clears unresolved state, and oversized/malformed hook events fail open.
Codex must not pretend a failed check succeeded.
If a shell command really exits non-zero, the failure remains unresolved until Codex either fixes it and reruns a relevant verification, or reports the failure plainly. The hooks and instructions do not treat scary words in stdout/stderr, such as failed, Traceback, or Request failed, as failure evidence by themselves. The source of truth is a real exit code, with transcript fallback by tool_use_id when needed.
This release keeps the developer-behavior layer from earlier Unison releases:
tools/persist_tool_result.py stores large command/tool outputs under .codex-hybrid/tool-results/ and prints a small preview plus the full path.tools/context_doctor.py audits context bloat and unresolved guard state without deleting anything.docs/context-hygiene.md defines lossy compaction and post-compaction rehydration rules.docs/retry-policy.md separates command failures, expected probe non-zero, provider/rate-limit failures, context overflow, and permission denials.docs/plan-handoff-template.md gives a file-based handoff for large tasks or optional context clear.The installer detects old managed installs by markers, not only by one exact folder name. It recognizes:
codex-claude-unison, codex-claude-hybrid, codex-claude-unison-hooks, codex-claude-unison-portable, and codex-claude-unison-portable-full skill directories or state markers;AGENTS.md blocks;HOW_TO.codex-claude-unison.md, README.codex-claude-unison.md, and HYBRID_MODEL_INSTRUCTIONS.codex-claude-unison.md docs;post_tool_use_review.py, pre_tool_use_policy.py, and stop_enforcer.py;hooks.json commands pointing to previous Unison/hybrid hook scripts;hybrid-*.toml custom agents when their content identifies them as managed by this package.Before replacing managed files, it creates a backup such as:
.codex-hybrid/backups/YYYYMMDDTHHMMSSZ-pre-v3.1.1/
For global installs, backups go under ~/.codex/backups/ unless --backup-dir is supplied. Each backup includes backup_manifest.json with original path, backup path, file size, SHA256, and planned action.
Unix, macOS, Linux, Termux:
./install.sh --json
Windows PowerShell:
.\install.ps1 --json
Windows cmd:
install.cmd --json
Direct Python entrypoint:
python3 .agents/skills/codex-claude-unison/scripts/bootstrap_portable.py --mode auto --target "$PWD" --replace-existing --yes --json
Supported flags:
--mode auto|repo|global|both
--target PATH
--source PATH # repeatable
--skip-hooks
--replace-existing
--backup-dir PATH
--dry-run
--yes
--json
--mode auto is workspace-first. If the target is in a git repo, it installs at the repo root. If not, it installs into the target workspace. Global install is explicit through --mode global or --mode both.
The installer preserves [features].multi_agent_v2 = true and removes legacy [agents].max_threads / [agents].max_depth only when MultiAgentV2 is enabled, because that combination breaks modern Codex. It never generates those legacy [agents] defaults. It adds [features].codex_hooks = true only when hooks are installed.
From the archive root:
python3 tools/verify_bundle.py --json
The verifier checks required files, Python compilation, hooks, helper tools, installer smoke tests, replacement migration, idempotence, dry-run behavior, config regression, and Windows path quoting logic.
If you install hookless with --skip-hooks, the installed repo verifier reads .codex-hybrid/bootstrap.state.json and skips hook-file requirements.
git rev-parse, and does not assume GNU coreutils.This package is Codex-native and clean-room. It does not add telemetry, GrowthBook, Statsig, plan upsells, engagement loops, or fake “unlimited context” claims. Compaction is treated as lossy. Model/runtime capability claims must be verified before being reported as current facts.
Codex-Claude Unison is released under the MIT License. See LICENSE in the source archive. When installed into another repository, the package license is preserved as LICENSE.codex-claude-unison so the host repository's own license is not overwritten.