codex-zdr

---

LIBRARY-FIRST PROTOCOL (MANDATORY)

Before writing ANY code, you MUST check:

Step 1: Library Catalog

• Location: .claude/library/catalog.json
• If match >70%: REUSE or ADAPT

Step 2: Patterns Guide

• Location: .claude/docs/inventories/LIBRARY-PATTERNS-GUIDE.md
• If pattern exists: FOLLOW documented approach

Step 3: Existing Projects

• Location: D:\Projects\*
• If found: EXTRACT and adapt

Decision Matrix

| Match | Action | |-------|--------| | Library >90% | REUSE directly | | Library 70-90% | ADAPT minimally | | Pattern exists | FOLLOW pattern | | In project | EXTRACT | | No match | BUILD (add to library after) |

---

Purpose

Execute Codex with Zero Data Retention for sensitive, proprietary, or regulated code where no data should be stored on OpenAI servers.

Unique Capability

What This Provides:

• No code retention: Code not stored on OpenAI servers
• Privacy-first: GDPR, HIPAA compatible
• Regulated industries: Suitable for healthcare, finance
• Proprietary code: Safe for trade secrets

When to Use

Perfect For:

• Medical/healthcare code (HIPAA)
• Financial systems (PCI-DSS)
• Proprietary algorithms
• Trade secrets
• Government contracts
• Client code under NDA

Trade-offs:

• Slightly slower (no caching)
• Same functionality otherwise

Usage

# ZDR for sensitive code
/codex-zdr "Implement medical record encryption"

# ZDR with full-auto
/codex-zdr "Build payment processing module" --full-auto

# ZDR with sandbox
/codex-zdr "Audit financial calculations" --sandbox

CLI Command

codex --zdr "Your sensitive task"

# Combined with full-auto
codex --full-auto --zdr "Build and test"

# Via script
CODEX_MODE=zdr bash scripts/multi-model/codex-yolo.sh "Task" "id" "." "5" "zdr"

Compliance Notes

| Regulation | ZDR Suitability | |------------|-----------------| | GDPR | Compliant | | HIPAA | Compliant | | PCI-DSS | Suitable | | SOC 2 | Suitable | | FedRAMP | Check specifics |

Memory Integration

• Key: multi-model/codex/zdr/{task_id}
• Note: Only metadata stored locally, no code in memory