Local, policy-checked computer access for Codex through Deskal: bounded workspace files, local Git, registered build tools, and read-only desktop observation, with every change approved on this computer.