git clone https://github.com/AI45Lab/SentrySkills.git ~/.codex/sentryskills
mkdir -p ~/.agents/skills
ln -s ~/.codex/sentryskills ~/.agents/skills/sentryskills
cp ~/.codex/sentryskills/AGENTS.template.md ~/.codex/AGENTS.mdWindows PowerShell:
New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\.agents\skills"
cmd /c mklink /J "$env:USERPROFILE\.agents\skills\sentryskills" "$env:USERPROFILE\.codex\sentryskills"
Copy-Item "$env:USERPROFILE\.codex\sentryskills\AGENTS.template.md" "$env:USERPROFILE\.codex\AGENTS.md" -ForceRestart Codex after installation.
Codex does not provide the same hard enforcement as a hook-driven integration. Treat this as:
SKILL.mddefines the methodAGENTS.mdenforces agent behavior as much as the framework allows
Recommended policy:
- always run the rule frontend first
- if
rule_stage_action == block, stop immediately - assign
framework_risk_levelafter rule gating - only low-risk turns may use subagents for
model_stage - if risk is high or subagent behavior is not reliable, fall back to synchronous
model_stage - run one proposal sweep at the end of each main-agent task
- proposal sweep only affects subsequent turns
The runtime writes workspace-local state into:
.sentryskills/base/.sentryskills/extra/
Key fields in results:
base_rule_actionextra_rule_actionrule_stage_actionframework_risk_levelmodel_dispatch_modemodel_stage_statusmodel_executormodel_stage_result_availableproposal_sweep_effectfinal_action