This episode breaks down the safety upgrades in Codex CLI v0.144.8, including strict nested-agent limits, Rust-based process-tree tracking, and safeguards against runaway child spawning. It also covers session recovery, single-agent lockdown settings, and one lingering gotcha around port leaks after a hard kill.