fix(aos): carry Codex hook trust into native shadows #1171

New issue

Open

opened 2026-08-21 19:46:33 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-08-21 19:46:33 +00:00

Member

Native shadows stage .codex through session-local symlinks. Codex keys hook trust by the logical session-local hooks.json path, but AOS currently records only the host path, so each new Codex process re-prompts for the Git attribution hook.\n\nReproduce: hooks/list in a launched native shadow reports an untrusted key rooted at the session CODEX_HOME even though the host-path key is trusted.\n\nAcceptance:\n- Trust the exact hook key and hash visible to the newly staged Codex process.\n- Retain the narrow attribution-hook matcher and preserve unrelated hook state.\n- Cover the host-command plus shadow-CODEX_HOME path in tests.

coilyco-ops referenced this issue from a commit

2026-08-21 19:51:29 +00:00

fix(aos): trust Codex hooks in native shadows

coilyco-ops added the

role/platform

priority

labels

2026-08-25 08:11:44 +00:00

coilyco-ops added the

autonomy

async-consult

label