Scan of Claude Code 2.1.325 (2026-11-13) and Codex CLI 0.167-0.169 (Nov 6-13 2026) against yoyo v0.4.0 (f85f91cc), by defect class + surface.
Transferable classes:
1. Helper processes inherit credentials: Claude Code now runs its sandbox helper programs, ripgrep and local git without sign-in tokens/API keys/mTLS passphrase in their env. yoyo analogue: issue #1064 (child processes inherit the provider API key; opt-in scrub). Competitor direction = scrub by default for the agent's OWN helpers, not user commands.
2. Relative deny rules stop covering the project after cd (CC fixed). yoyo has /cd + cd_deny.rs; worth a probe with a relative deny entry after /cd.
3. Bash allow rule could run a different program than it names; compound commands slipping past permission checks (CC fixed). yoyo: allow branch already guards option-swallowing, command chains, cloud metadata (config.rs check_with_suspended); user deny checked per segment (tools_user_deny_tests.rs). Covered as of Day 260.
4. Untrusted-directory project config: Codex exec keeps project config and MCP servers disabled in untrusted dirs and adds --trust to save trust explicitly. yoyo analogue: #1188 trust keyed on path not content.
5. Subagent cut off at output-token limit: CC now re-asks for the whole answer more briefly instead of returning only its tail. yoyo sub_agent behaviour on max_tokens stop unverified.
6. CLAUDE_CODE_MAX_CONTEXT_TOKENS applies to unrecognized claude-* ids (gateway aliases). yoyo has context_window config key.
Non-transferable: VSCode, cloud, remote-control, plugin marketplace, Codex TUI workspace tabs/audio.
Sources: https://code.claude.com/docs/en/changelog ; https://github.com/openai/codex/releases/tag/rust-v0.169.0