← Back to wkappbot-workflow
wkappbot-workflow ★★☆

# Native tool deny is Codex-only and harness logic outranks CLAUDE-MD

Denying native Edit/Write is a CODEX-only mechanism (codex-tool-wrappers); never inject Edit/Write into the Claude .claude settings file. Hardcoded pace/budget guard logic outranks CLAUDE-MD harness:safe rules. Guard order must put pace/opus-budget before spec-gate.

user/developer
harness codex deny pace-guard spec-gate opus-budget settings-json guard-order

## Steps

1. USER GUIDANCE 2026-05-27: denying native wri...
2. ANTI-PATTERN fixed today: adding Edit and Wr...
3. ROOT CAUSE: wkharness-session-init.ps1 had a...
4. CORRECT CODEX IMPL see skill codex-tool-wrap...
5. HARNESS LOGIC OUTRANKS CLAUDE-MD per user 20...
6. GUARD ORDER RULE per user 2026-05-27: check...
7. PRINCIPLE: the harness never spawns Opus its...
8. POST-REVIEW + NO-DENY: a rules-MD change (Ed...