What problem does it solve? It lets a Claude orchestrator hand off a well-scoped implementation task to an unattended Codex CLI worker without giving that worker access to GitHub, the network, or the packet directory, while keeping authorization, completion detection, and PR creation under strict orchestrator control. ## Core Features & Use Cases - Sandboxed worker launch: Runs codex exec in a per-issue local clone via a herdr pane, using only the preflight-generated launch argv with connectors, MCP servers, and execpolicy rules disabled. - Deterministic completion and transcription: Detects completion through a nonce-stamped done file and result file, then transcribes the worker's final message into the packet only after it passes the public-safety gate. - Orchestrator-controlled PR flow: Fetches worker commits back into the main repository, verifies all trailers are Codex-only, then pushes and opens the PR without merging. - Use Case: You say "delegate packet #291 to Codex" and the skill clones the repo, launches the worker in a #291 herdr tab, waits for completion, records the result in the packet, and opens a trailer-checked PR. ## Quick Start Ask the orchestrator to delegate packet #N to Codex for implementation and wait for the worker to finish and the PR to be opened.