Session transcripts can contain source code, prompts, model output, filesystem paths, and other sensitive material. This utility protects against accidental cross-account state sharing, conflicting session overwrites, partial migration, unsafe path selection, nested symlinks, and concurrent migrations.

It does not protect against:

• another process running as the same operating-system user;
• a malicious Codex home or recovery manifest supplied by the user;
• cloud-sync, backup, or endpoint-management software reading the shared store;
• changes to Codex's undocumented local session format;
• an active Codex process writing while migration or rollback occurs.

Use a local directory owned by your OS user, keep it out of Git and cloud-sync folders, and close all Codex clients before any mutation.

Security fixes are applied to the latest released version. Until the project reaches 1.0, users should review release notes before upgrading.

Do not open a public issue containing session data, credentials, home-directory paths, or exploit details. Use the repository host's private security advisory feature. Maintainers should acknowledge a report within seven days and publish a coordinated fix before disclosing details.