agent/codex/scripts/safety.sh