Codex Guardrails

✓ Policy Experimental Devex Build And Ci

Enforces Codex-specific CI safety standards. Validates that Codex CLI invocations do not use dangerous flags and use structured JSON output.

Add codex to your lunar-config.yml:

uses: github://earthly/lunar-lib/policies/codex@v1.0.5

Get Started View on GitHub

Included Guardrails

This policy includes 2 guardrails that enforce standards for your devex build and ci.

Guardrail

`cli-safe-flags`

Ensures Codex CLI invocations in CI do not use dangerous permission-bypassing flags. Flags like --full-auto remove safety guardrails that prevent the AI from executing arbitrary code without human approval.

codex ci safety dangerous flags permissions

View Guardrail

Guardrail

`cli-structured-output`

Ensures Codex CLI invocations in CI use structured JSON output instead of plain text. JSON output makes AI automation deterministic and parseable.

codex json output structured output ci automation

View Guardrail

How Guardrails Fit into Lunar

Lunar guardrails define your engineering standards as code. They evaluate data collected by integrations and produce pass/fail checks with actionable feedback.

Policies support gradual enforcement—from silent scoring to blocking PRs or deployments—letting you roll out standards at your own pace without disrupting existing workflows.

Learn How Lunar Works →

↓ Integrations Gather Data

Collectors extract metadata from code, CI pipelines, tool outputs, and scans

{ } Centralized as JSON

All data merged into each component's unified metadata document

✓ Guardrails Enforce Standards This Policy

Real-time feedback in PRs and AI workflows

Example Evaluated Data

This policy evaluates structured metadata from the Component JSON. Here's an example of the data it checks:

{ } component.json Example Input

{
  "ai": {
    "native": {
      "codex": {
        "cicd": {
          "cmds": [
            {
              "cmd": "codex exec --json 'review this PR'",
              "tool": "codex",
              "version": "0.1.0"
            }
          ]
        }
      }
    }
  }
}

Required Integrations

This policy evaluates data gathered by one or more of the following integration(s). Make sure to enable them in your lunar-config.yml.

Collector Code Analysis Required

Codex Collector

Provides Codex CI command data from ai.native.codex.cicd

Configuration

Configure this policy in your lunar-config.yml.

Inputs

Input	Required	Default	Description
`dangerous_flags`	Optional	`--dangerously-bypass-approvals-and-sandbox,--yolo,--full-auto`	Comma-separated dangerous flags for Codex CLI

Documentation

View on GitHub

Codex Guardrails

Codex-specific CI safety and conventions guardrails.

Overview

This policy enforces Codex-specific CI standards. It validates that Codex CLI invocations in CI pipelines do not use dangerous permission-bypassing flags and use structured JSON output for deterministic automation.

Policies

Policy	Severity	Description
`cli-safe-flags`	error	Codex CLI must not use `--full-auto` or similar flags
`cli-structured-output`	warning	Codex CLI in CI should use structured JSON output

Required Data

Path	Provided By	Description
`.ai.native.codex.cicd.cmds[]`	`codex` collector	Codex CLI invocations captured in CI

Installation

collectors:
  - uses: github://earthly/lunar-lib/collectors/codex@main
    on: ["domain:your-domain"]

policies:
  - uses: github://earthly/lunar-lib/policies/codex@main
    enforcement: report-pr

Examples

Passing

Codex CLI using safe flags and structured output:

{
  "ai": {
    "native": {
      "codex": {
        "cicd": {
          "cmds": [
            {
              "cmd": "codex exec --json 'review this PR'",
              "tool": "codex"
            }
          ]
        }
      }
    }
  }
}

Failing

Codex CLI using dangerous flag:

{
  "ai": {
    "native": {
      "codex": {
        "cicd": {
          "cmds": [
            {
              "cmd": "codex --full-auto 'deploy to prod'",
              "tool": "codex"
            }
          ]
        }
      }
    }
  }
}

Remediation

cli-safe-flags: Remove --full-auto from Codex CI invocations. Use scoped permissions instead.
cli-structured-output: Add --json or equivalent structured output flag to Codex CLI invocations in CI.

Open Source

This policy is open source and available on GitHub. Contribute improvements, report issues, or fork it for your own use.

View Repository

Common Use Cases

Explore how individual guardrails work with specific integrations.

Cli Safe Flags + Codex Collector Ensures Codex CLI invocations in CI do not use dangerous...

→

Cli Structured Output + Codex Collector Ensures Codex CLI invocations in CI use structured JSON output instead of plain...

→

Ready to Automate Your Standards?

See how Lunar can turn your AGENTS.md, engineering wiki, compliance docs, or postmortem action items into automated guardrails with our 100+ built-in guardrails.

Works with any process

AI agent rules & prompt files

Post-mortem action items

Security & compliance policies

Testing & quality requirements

Automate Now

Paste your AGENTS.md or manual process doc and get guardrails in minutes

Book a Demo