[codepilotios]

Summary

• make gateway-created Codex app-server turns safe by default, with dangerous mode requiring explicit opt-in
• remove machine-specific defaults from local agent scripts
• replace embedded private privacy-audit patterns with generic checks plus optional local denylist support
• add a private escalation note for unresolved gateway file-preview and local-web proxy product-boundary decisions

Verification

• scripts/privacy-audit.sh
• zsh -n on changed launch/audit scripts
• python3 -m unittest test_codex_phone_gateway test_remote_desktop_gateway
• swift test
• git diff --check

Notes

• Security scan report is local to the scan run.
• Remaining launch decisions are documented in ops/agents/escalations/security-scan.md.