Anyone using Codex hooks in production?

Codex mobile in the ChatGPT app

https://techcrunch.com/wp-content/uploads/2026/05/App-view.png?resize=1200,675)

Codex shipped a batch of infra updates in May 2026:

  • Mobile access (preview) — manage sessions from ChatGPT on iOS/Android

  • Hooks now GA — inject scripts at 6 lifecycle points (PreToolUse, PostToolUse, PermissionRequest, etc.)

  • Access tokens for Business/Enterprise CI/CD

  • Remote SSH GA

I am most interested in hooks. The PreToolUse event lets you scan Bash commands before they execute — useful for credential leak prevention. But the docs say it does not intercept all shell calls yet.

Anyone tried hooks for compliance or security workflows? What patterns are you using?