We unpack how Codex split its Zsh helper into a standalone package and now uses Meta’s DotSlash manifests to fetch the right native binary with built-in SHA-256 verification on macOS and Linux. The episode also covers quieter formatter runs, security updates to OpenSSL and esbuild, and a new warning that helps avoid wasting API credits on unsupported Code Mode models.