[jgibbonsSplunk]

BORN-413 groundwork for the OpenAI Codex directory submission (BORN-191).

• PRIVACY.md: new Outbound network flows section covering the GitHub release download, the splunk.com location lookup and Free Edition signup, connecting a Cloud org (ingest and app endpoints, X-SF-Token), the access token from the environment, and the OAuth registration override.
• SECURITY.md: widens the "everything goes to loopback" sentence, which the Splunk flows contradicted.
• .codex-plugin/plugin.json: adds privacyPolicyUrl, matching the Claude manifest. Staged --check and --check-manifest-versions pass.
• docs/codex-directory: reviewer test cases (5 positive, 3 negative), demo script, release notes template, demo-account plan. Test case 5 (otel-audit on a sample service) has no matching qualitative eval, so its expected behavior is marked TODO(confirm).

Open item: a token from the shell or ~/.obstudio/env is written to ~/.obstudio/managed-observer.json (0600) when Studio is started through the obstudio CLI managed path. The plugin hook does not use that path. This PR discloses it; whether to change it is a separate decision.

No eval content changed. Draft until the BORN-411 spike answers the hooks and loopback MCP questions.

🤖 Generated with Claude Code