# Jobjakt — Codex Security Scan Register

> Template only. Every entry must describe an actually attempted action, not an intended scan. No raw secrets/PII in this file.

## Scope baseline
- Project / authorized repo: TODO
- Approved branch and Git SHA: TODO
- Owner authorization / staging ROE file: TODO
- Installed Codex Security verified in this session?: TODO
- Approved paid usage / runtime budget: TODO / PENDING
- Production and third-party hosts: OUT OF SCOPE

## Scans and workflow calls
| Date | Phase | Skill / workflow | Repo path, branch and SHA or diff | Status | Scan ID / artifact path | Actual coverage and omissions | Findings IDs / disposition | Billing approval or blocker |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| TODO | 01 | `$codex-security:security-scan` | TODO | NOT RUN | N/A | N/A | N/A | N/A |
| TODO | 03 | `$codex-security:deep-security-scan` | TODO | NOT RUN | N/A | N/A | N/A | PENDING |
| TODO | 15 | `$codex-security:security-scan` | TODO | NOT RUN | N/A | N/A | N/A | N/A |
| TODO | 15 | `$codex-security:security-diff-scan` | TODO | NOT RUN | N/A | N/A | N/A | N/A |

Allowed statuses: **COMPLETED, FAILED, BLOCKED, NOT RUN**. A completed scan can still have PARTIAL coverage; explain omissions.

## Finding lifecycle
| Finding ID | Source scan ID | Evidence and risk summary (redacted) | Validated status | Fix commit | Verify-fix verdict | Retest evidence | Closure approval |
| --- | --- | --- | --- | --- | --- | --- | --- |
| TODO | TODO | TODO | UNVERIFIED | N/A | INCONCLUSIVE | N/A | OPEN |

## Final reviewer declaration
- Full baseline standard scan complete? TODO
- Full baseline deep scan complete (approved)? TODO
- Final full standard rescan complete? TODO
- Diff scan over all fixes complete? TODO
- Critical/high unresolved? TODO
- Out-of-scope components / skipped checks: TODO
- Human reviewer and GO/NO-GO: TODO