Pinned artifact: 3f1d281cf6fc6c094878405f5945d3d9e250f86d, source commit 3f1d281cf6fc6c094878405f5945d3d9e250f86d.
The install-time hold clears under the current review policy. Manifest preparation script performs only locked npm ci --omit=dev --ignore-scripts; 370 dependency entries all public npm/integrity; no lifecycle execution.
Manual display-only plain-English rewrites of completed assistant answers. markdown-it splits answer blocks, marked renders markdown. Installed Pi with existing openai-codex authentication performs rewrite; model host resides in external Pi provider and is not statically known from plugin.
Exact Git artifact and tag v0.2.0 dereferenced to commit. No plugin, installation or lifecycle code was executed during this static review. No surviving review finding remains. This issue stays open until the matching import and overview PR is ready.
Pinned artifact:
3f1d281cf6fc6c094878405f5945d3d9e250f86d, source commit3f1d281cf6fc6c094878405f5945d3d9e250f86d.The install-time hold clears under the current review policy. Manifest preparation script performs only locked npm ci --omit=dev --ignore-scripts; 370 dependency entries all public npm/integrity; no lifecycle execution.
Manual display-only plain-English rewrites of completed assistant answers. markdown-it splits answer blocks, marked renders markdown. Installed Pi with existing openai-codex authentication performs rewrite; model host resides in external Pi provider and is not statically known from plugin.
Exact Git artifact and tag v0.2.0 dereferenced to commit. No plugin, installation or lifecycle code was executed during this static review. No surviving review finding remains. This issue stays open until the matching import and overview PR is ready.