above permanent underclass

Local-first security review plugin and workflow for Codex — builds a repo-wide security model, saves a trusted baseline, then compares working state to surface newly introduced attack vectors.