agent/codex
OpenAI Codex agent policy: LLM APIs, GitHub, and the OpenAI secret binding; composes the Node runtime pack.
| Reference | Kind | Latest | Architecture | Size | Publisher |
|---|---|---|---|---|---|
agent/codex |
policy | 1.0.0 |
— | — | tinylabscom/mvm-packs (official) |
mvmctl pull agent/codexmvmctl pull agent/codex@1.0.0This pack is a policy and is not runnable: it has no kernel, root filesystem or entrypoint.
Versions
Section titled “Versions”| Version | Manifest SHA-256 | Revoked |
|---|---|---|
1.0.0 |
63f7c363966fe3bacb894e50be1e04e720ea6ac4e9a2d878fb2c811dc21bea7c |
yes |
Policy declarations (1.0.0)
Section titled “Policy declarations (1.0.0)”Included groups name other policies; they do not describe every effective permission.
| Declaration | Value |
|---|---|
| Included group | llm-apis |
| Included group | github |
| Included group | runtime/node |
Secret bindings
Section titled “Secret bindings”Binding names and allowed hosts only; a binding is not proof that a secret is required, and no secret values are stored here.
| Binding | Allowed hosts |
|---|---|
openai |
api.openai.com |
Publisher
Section titled “Publisher”Each manifest is signed keyless; manifest.sigstore.json binds it to a workflow identity (issuer https://token.actions.githubusercontent.com). Identities each version can be verified under:
1.0.0:https://github.com/tinylabscom/mvm-packs/.github/workflows/publish.yml@refs/heads/main