Installing Canon Boundary Guard adds the plugin to your Codex environment, makes theDocumentation Index
Fetch the complete documentation index at: https://mintlify.com/XxYouDeaDPunKxX/canon-boundary-guard-codex/llms.txt
Use this file to discover all available pages before exploring further.
$canon-boundary-guard skill available for session activation, and — if you choose — wires the bundled PreToolUse hook so the compact classification frame is automatically re-injected before matched write operations. Installation is handled entirely through the Codex plugin system; no manual file copying is required for the standard setup.
Install the Plugin
Add the repository via the marketplace
Run the following command to register the Canon Boundary Guard repository as a Codex plugin source:This makes the plugin available in Codex but does not yet enable it.
Enable Canon Boundary Guard in the plugin picker
Open Codex and navigate to the plugin list. In Codex UIs that support slash commands, open the plugin picker with:Find Canon Boundary Guard in the list and enable it. The skill and hook bundle will be registered with your Codex installation.
Enabling the Hook
The PreToolUse hook is optional but recommended for sessions where repository content, project rules, naming conventions, workflows, or
AGENTS.md authority may be relevant. Without the hook, the classification frame is still fully active via the skill — the hook only re-surfaces the compact frame at the exact moment a write tool is called, as an additional reinforcement layer.config.toml:
- If your Codex UI exposes
/hooks— open the hook review view and trust the Canon Boundary Guard hook listed there. - In editor integrations where
/hooksis not available — open the plugin details panel or approve the hook when Codex shows the trust prompt.
apply_patch, Write, and Edit operations:
hookSpecificOutput.additionalContext (the model-visible context path for PreToolUse) and also surfaces it as a systemMessage so the hook activity remains visible in the UI or event stream. It does not block the tool call or modify the requested operation.