Please report vulnerabilities privately through GitHub's security advisory feature instead of opening a public issue.

Do not attach a Codex Meter database, files from ~/.codex, environment files, or collector logs to a report. These artifacts can contain local paths, account usage metadata, or conversation-derived information.