Stateful integrity verification for every Codex tool call: argument classification, output scanning, sensitive-data egress gating, and a hash-linked decision chain you can verify after the session.