A runtime harness around Codex CLI using a proxy, prompt injection, refusal rewriting, and security tooling.