Pre-release. sdlc.cc is not generally available. There is no completed customer deployment and no design partner yet, and per-class detection accuracy has not been published. What is and is not proven →
JOURNEY_SENTINEL_CODEX · Preview
Codex gateway
Privacy before OpenAI sees the prompt.
A native installer sets Codex openai_base_url to https://api.sdlc.cc/v1 — not api.openai.com. The gateway scrubs OpenAI Chat Completions and Responses bodies, then forwards upstream. Preview: scrub-forward, not full durable enforcement yet.
Why Codex needs its own path
Codex talks OpenAI’s API (/v1/responses), not Anthropic Messages. Browser Guard never sees those calls. Pointing at OpenAI directly bypasses sdlc.cc.
Not a base-URL myth anymore
Older docs said OPENAI_BASE_URL at the gateway could not work. Exact /v1/responses and /v1/chat/completions now scrub-forward when the host has OPENAI_API_KEY.
Installer writes Codex config
Sets ~/.codex/config.toml openai_base_url and your sk_sdlc_* key in the user environment — not a wiki of env vars.
Still Preview
Unlike Claude Code’s Supported /v1/messages lifecycle, this path is scrub-forward with a Preview banner header. Durable enforcement parity remains Planned.
How it works
Install
| Platform | Artifact | What you do |
|---|---|---|
| Windows | SdlcCodexGatewaySetup-windows-amd64.exe | Double-click → enter key → quit/reopen Codex → -verify |
| macOS | …-macos-arm64.app.zip | Open the .app → enter key → quit/reopen Codex |
| Linux | linux-amd64 binary | Run in a terminal |
# Silent
SdlcCodexGatewaySetup-windows-amd64.exe -silent `
-api-key sk_sdlc_... -gateway https://api.sdlc.cc/v1
# Verify
… -verify
# openai_base_url must be https://api.sdlc.cc/v1 — never api.openai.com
Legacy /v1/completions and query-string variants of OpenAI routes still return UNSUPPORTED_MODEL_WRITE. Images/files are refused. Signed MSI / notarized DMG remain Planned.
Coverage
| Surface | Status | Boundary |
|---|---|---|
Codex via installer → sdlc /v1/responses |
Preview | Scrub-forward; host needs upstream OPENAI_API_KEY; stream:true refused |
| OpenAI Chat Completions via gateway | Preview | Same scrub-forward contract; non-streaming only |
| Cloudflare AI Gateway worker | Preview | Alternate path; still valid |
| ChatGPT web Browser Guard | Supported | Different product — not Codex |
Durable enforcement parity with /v1/messages |
Planned | Required before claiming Supported |
| Uploads, images, voice, legacy completions | Unsupported | Fail closed |
Get Codex on the gateway
- Download the installer from /downloads/.
- Activate a
sk_sdlc_*key with themessagesscope. - Run the installer, quit Codex fully, reopen, then
-verify. - Confirm the gateway host has
OPENAI_API_KEYfor upstream.
Preview software. Claude Code’s Supported path is documented separately on the integrations page.