feat(codex): update placemat for Codex CLI v0.160.0

[dommango]

What this changes

Syncs the Codex placemat from v0.159.3 to v0.160.0 (the only newer stable release — confirmed via the releases.atom and /releases fallbacks since api.github.com is gated in the sandbox, cross-checked against npm's dist-tags.latest). Adds two new card-settings rows, auto_review.policy and auto_review.extra_policy, for the release's opt-in Guardian review capabilities, confirmed verbatim against config-reference.md. Cross-referenced codex --help (installed @openai/codex@0.160.0) and the raw developer-commands.md slash-command list against the existing page — no other new commands, settings, or hooks surfaced, so no other rows changed.

Type

• Content correction (wrong/outdated/missing entry)
• Bug fix (broken layout, link, behavior)
• Design / CSS / accessibility
• Style guide or structural change
• New agent placemat
• Docs (README / AGENTS.md / CONTRIBUTING)
• CI / tooling

Checklist

• I read AGENTS.md's Style Guide and Content Rules
• node tests/placemat.test.js passes locally (54 passed, 0 failed)
• node scripts/build-changes.js --all --check passes locally (generated files are fresh)
• No versions/*.html files were edited (they're frozen snapshots — no exceptions)
• No hand-edited changes.json or feed.xml — both are generator output (regenerated via build-changes.js)
• Every new/changed row is sourced from Codex's own vendor docs, changelog, or --help output (link below) — never copied or inferred from a sibling placemat
• Anything I could only infer, rather than confirm, carries class="unverified" (n/a this run — both new rows are directly quoted from config-reference.md)
• New rows have an id="i-<slug>" and a matching .row-link permalink
• Only one agent directory is touched (codex/ only)

Source

• Release notes: https://github.com/openai/codex/releases/tag/rust-v0.160.0
• Settings confirmation: https://learn.chatgpt.com/docs/config-file/config-reference ("auto_review.policy", "auto_review.extra_policy")
• CLI surface re-verified against codex --help (v0.160.0) and https://learn.chatgpt.com/docs/developer-commands?surface=cli

🤖 Generated with Claude Code

https://claude.ai/code/session_017yDYyDtiWF4un3SHF6nD9g

---

Generated by Claude Code

[dommango]

Merge-gate code review (Step 10)

First pass found one CRITICAL/HIGH finding: auto_review.policy was listed under the v0.160.0 "ADD" entry as part of the new Guardian review capabilities, but it was already a confirmed vendor key in sources.json's inventory since before v0.159.3 — attributing it to this release was inaccurate. Only auto_review.extra_policy is genuinely new in v0.160.0.

Fix (commit 1164975): moved auto_review.policy to a Template/Structure backfill entry (a pre-existing confirmed key that had never been given a placemat row) and kept only auto_review.extra_policy under the v0.160.0 release heading. Regenerated changes.json/feed.xml to match.

Re-review (second pass, as the pipeline allows exactly one): clean — no findings. Verified:

• Regenerated changes.json/feed.xml are byte-identical to committed versions (no hand-editing).
• Both new settings keys (auto_review.policy, auto_review.extra_policy) and the related managed overrides (guardian_policy_config, guardian_extra_policy) are genuine, independently confirmed against config-reference.md.
• Row IDs, group placement, notes +N counts, and per-page parity (release tag / print-head / footer date) all check out.
• node tests/placemat.test.js codex: 54/54 pass.

Proceeding to merge per the pipeline's Step 10 merge gate (no CRITICAL/HIGH finding standing, CI green).

---

Generated by Claude Code