Add the Latten MCP server to Codex and give it one task: provision an observe-only brain if no token exists, read the guide, scan the TypeScript repo, instrument high-confidence crossings with @latten/sdk, open a reviewable PR, verify real traffic, and return the trust receipt plus claim link.
See it on a live graph — no signup →Codex does not need a Latten account before it can begin. The installer MCP exposes a provision tool that mints an observe-only brain and token for this repo, then returns a claim URL for the human to attach it to an account later.
Codex should never silently rewrite production code. The contract is a branch and a reviewable PR, with every inserted crossing marked so the diff is easy to audit and easy to revert.
After the PR runs against real traffic, Codex calls verify and receipt. The receipt is the value moment: what the AI reached, what it cost, how much was attributed, and confirmation that only types and counts — never PII values — crossed the wire.
No. The provision tool creates an observe-only brain and claim link before login.
No. The expected output is a reviewable PR. A human approves and merges it.
Provisioning, first finding, and the trust receipt are free. The live fix list, agent handoff, verification loop, exports, and team history unlock with Solo or Team.