diff --git a/codex/changelog.html b/codex/changelog.html
index d0790bd..f448912 100644
--- a/codex/changelog.html
+++ b/codex/changelog.html
@@ -161,8 +161,23 @@ <h2>Template v1.0 <span class="version-date">2026-09-12 — As of Codex CLI v0.1
 
             <div class="change-section">
                 <h3>Content / Codex CLI Releases</h3>
-                <!-- September 2026 -->
+                <!-- October 2026 -->
                 <details class="month-group" open>
+                    <summary>October 2026 <span class="version-date">v0.160.0</span> <span class="month-count">1 release</span></summary>
+                    <div class="month-content">
+
+                        <div class="change-section">
+                            <h3 id="rel-0-160-0">Codex CLI v0.160.0 <span class="version-date">2026-10-01</span></h3>
+                            <ul class="change-list">
+                                <li><span class="tag tag-add">ADD</span><span class="entry"><code>auto_review.extra_policy</code> (<code>card-settings</code>) — additional Markdown policy appended alongside the main auto-review policy, part of this release&rsquo;s opt-in Guardian review capabilities</span></li>
+                            </ul>
+                        </div>
+
+                    </div>
+                </details>
+
+                <!-- September 2026 -->
+                <details class="month-group">
                     <summary>September 2026 <span class="version-date">v0.154.0 – v0.159.0</span> <span class="month-count">8 releases</span></summary>
                     <div class="month-content">
 
@@ -240,12 +255,13 @@ <h3>Template / Structure</h3>
                     <li><span class="tag tag-fix">FIX</span><span class="entry"><code>sources.json</code> gained a vendor-extracted <code>inventory</code> (54 slash commands, 224 settings keys, 12 hook events, sourced from <code>developer-commands.md</code>, <code>config-reference.md</code>, <code>config-basic.md</code> and <code>hooks.md</code>); <code>codex</code> is now under the inventory gate in <code>tests/placemat.test.js</code></span></li>
                     <li><span class="tag tag-fix">FIX</span><span class="entry">Marked <code>mcp_oauth_callback_port</code> and <code>mcp_optional_startup_grace_ms</code> (<code>card-hooks</code>) <code>unverified</code> — both are confirmed <code>config.toml</code> keys, but the inventory gate reads every bare-word chip in <code>card-hooks</code> as a hook-event candidate, and neither is a hook event</span></li>
                     <li><span class="tag tag-fix">FIX</span><span class="entry">Marked the v0.156.0 additions <code>/tui</code>, <code>/daemon</code> and <code>--no-daemon</code> <code>unverified</code> — <code>learn.chatgpt.com</code> (developer-commands, config-reference, hooks) was unreachable from the sync sandbox this run, so <code>sources.json → inventory</code> was not re-extracted; promote them once a future sync confirms against the docs</span></li>
+                    <li><span class="tag tag-fix">FIX</span><span class="entry">Backfilled <code>auto_review.policy</code> (<code>card-settings</code>) — already a confirmed <code>config.toml</code> key in <code>sources.json → inventory</code> since the original extraction, but had never been given a placemat row</span></li>
                 </ul>
             </div>
         </div>
 
         <footer class="global-footer">
-            Template v1.0 · Content synced 2026-09-29<br>
+            Template v1.0 · Content synced 2026-10-01<br>
             <span class="disclaimer">Unofficial community reference — not affiliated with or endorsed by OpenAI.
             Condensed from the official docs; always confirm against
             <a href="https://developers.openai.com/codex" target="_blank" rel="noopener noreferrer">developers.openai.com/codex</a>.</span><br>
diff --git a/codex/changes.json b/codex/changes.json
index 3369bfc..f1b421f 100644
--- a/codex/changes.json
+++ b/codex/changes.json
@@ -1,7 +1,20 @@
 {
- "generated": "2026-09-29",
- "latest": "v0.159.0",
+ "generated": "2026-10-01",
+ "latest": "v0.160.0",
  "releases": [
+  {
+   "version": "v0.160.0",
+   "label": "Codex CLI v0.160.0",
+   "date": "2026-10-01",
+   "id": "rel-0-160-0",
+   "entries": [
+    {
+     "tag": "ADD",
+     "item": "auto_review.extra_policy",
+     "html": "<code>auto_review.extra_policy</code> (<code>card-settings</code>) — additional Markdown policy appended alongside the main auto-review policy, part of this release&rsquo;s opt-in Guardian review capabilities"
+    }
+   ]
+  },
   {
    "version": "v0.159.0",
    "label": "Codex CLI v0.159.0",
diff --git a/codex/feed.xml b/codex/feed.xml
index f2abfa0..0f41e54 100644
--- a/codex/feed.xml
+++ b/codex/feed.xml
@@ -4,7 +4,14 @@
   <link href="https://dommango.github.io/agentmats/codex/"/>
   <link rel="self" href="https://dommango.github.io/agentmats/codex/feed.xml"/>
   <id>https://dommango.github.io/agentmats/codex/</id>
-  <updated>2026-09-29T09:00:00Z</updated>
+  <updated>2026-10-01T09:00:00Z</updated>
+  <entry>
+    <title>Codex CLI v0.160.0 — 1 placemat change</title>
+    <id>https://dommango.github.io/agentmats/codex/changelog.html#rel-0-160-0</id>
+    <link href="https://dommango.github.io/agentmats/codex/changelog.html#rel-0-160-0"/>
+    <updated>2026-10-01T09:00:00Z</updated>
+    <content type="html">&lt;ul&gt;&lt;li&gt;&lt;b&gt;ADD&lt;/b&gt; &lt;code&gt;auto_review.extra_policy&lt;/code&gt; (&lt;code&gt;card-settings&lt;/code&gt;) — additional Markdown policy appended alongside the main auto-review policy, part of this release&amp;rsquo;s opt-in Guardian review capabilities&lt;/li&gt;&lt;/ul&gt;</content>
+  </entry>
   <entry>
     <title>Codex CLI v0.159.0 — 3 placemat changes</title>
     <id>https://dommango.github.io/agentmats/codex/changelog.html#rel-0-159-0</id>
diff --git a/codex/index.html b/codex/index.html
index 0a165a6..779d598 100644
--- a/codex/index.html
+++ b/codex/index.html
@@ -48,7 +48,7 @@ <h1>Codex CLI <span class="wm-pixel">PLACEMAT</span></h1>
             <span class="header-tagline">Unofficial · auto-updated reference</span>
         </div>
         <div class="global-controls">
-            <span class="release-tag">As of release: v0.159.3</span>
+            <span class="release-tag">As of release: v0.160.0</span>
             <a href="changelog.html" class="header-link">Changelog →</a>
             <a href="feed.xml" class="header-link" title="Subscribe to placemat changes (RSS)">RSS</a>
             <button type="button" class="header-link print-btn" id="printBtn" title="Print or save as PDF (Ctrl P)">⎙ Print</button>
@@ -85,7 +85,7 @@ <h1>Codex CLI <span class="wm-pixel">PLACEMAT</span></h1>
 
         <div class="print-head" aria-hidden="true">
             <span class="print-head-title">Codex CLI <b>PLACEMAT</b></span>
-            <span>As of release v0.159.3</span>
+            <span>As of release v0.160.0</span>
             <span>■ = new &nbsp; □ = unverified</span>
             <span>dommango.github.io/agentmats/codex</span>
         </div>
@@ -405,6 +405,8 @@ <h2>Settings (config.toml) <span class="card-count"></span></h2>
                     <thead><tr><th scope="col" class="sr-only">Item</th><th scope="col" class="sr-only">Description</th></tr></thead>
                     <tr class="search-item" id="i-approval-policy"><td><a class="row-link" href="#i-approval-policy" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>approval_policy</code></td><td class="desc"><span class="summary">When Codex pauses for approval: <code>on-request</code> or <code>never</code></span> <button type="button" class="notes-btn" aria-expanded="false">+2</button><ul class="notes" hidden><li>A granular form allows or auto-rejects specific prompt categories while keeping others interactive.</li><li><code>untrusted</code> is unsupported and <code>on-failure</code> is deprecated.</li></ul></td></tr>
                     <tr class="search-item" id="i-approvals-reviewer"><td><a class="row-link" href="#i-approvals-reviewer" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>approvals_reviewer</code></td><td class="desc"><span class="summary">Who reviews eligible approval prompts: <code>user</code> or <code>auto_review</code></span> <button type="button" class="notes-btn" aria-expanded="false">+1</button><ul class="notes" hidden><li>Does not change sandboxing or actions already allowed inside the sandbox.</li></ul></td></tr>
+                    <tr class="search-item" id="i-auto-review-policy"><td><a class="row-link" href="#i-auto-review-policy" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>auto_review.policy</code></td><td class="desc"><span class="summary">Local Markdown policy instructions for the <code>auto_review</code> reviewer</span> <button type="button" class="notes-btn" aria-expanded="false">+1</button><ul class="notes" hidden><li>Managed <code>guardian_policy_config</code> in <code>requirements.toml</code> takes precedence when set.</li></ul></td></tr>
+                    <tr class="search-item" id="i-auto-review-extra-policy"><td><a class="row-link" href="#i-auto-review-extra-policy" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>auto_review.extra_policy</code></td><td class="desc"><span class="summary">Additional Markdown policy appended alongside the main auto-review policy</span> <button type="button" class="notes-btn" aria-expanded="false">+1</button><ul class="notes" hidden><li>Managed <code>guardian_extra_policy</code> in <code>requirements.toml</code> takes precedence when set.</li></ul></td></tr>
                     <tr class="search-item" id="i-sandbox-mode"><td><a class="row-link" href="#i-sandbox-mode" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>sandbox_mode</code></td><td class="desc">Sandbox policy: <code>read-only</code>, <code>workspace-write</code>, <code>danger-full-access</code></td></tr>
                     <tr class="search-item" id="i-sandbox-workspace-write-writable-roots"><td><a class="row-link" href="#i-sandbox-workspace-write-writable-roots" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>sandbox_workspace_write.writable_roots</code></td><td class="desc">Extra directories writable in workspace-write mode</td></tr>
                     <tr class="search-item" id="i-sandbox-workspace-write-network-access"><td><a class="row-link" href="#i-sandbox-workspace-write-network-access" tabindex="-1" title="Copy link to this entry (or press l on the row)" aria-label="Copy link to this entry">#</a><code>sandbox_workspace_write.network_access</code></td><td class="desc">Allow outbound network access inside the workspace-write sandbox</td></tr>
@@ -624,7 +626,7 @@ <h2>Hooks, MCP &amp; Sandbox <span class="card-count"></span></h2>
         <div class="no-results search-exclude" id="noResults">No matches — clear search to see everything.</div>
 
         <footer class="global-footer">
-            Template v1.0 · Content synced 2026-09-29<br>
+            Template v1.0 · Content synced 2026-10-01<br>
             <span class="disclaimer">Unofficial community reference — not affiliated with or endorsed by OpenAI.
             Condensed from the official docs; always confirm against
             <a href="https://developers.openai.com/codex" target="_blank" rel="noopener noreferrer">developers.openai.com/codex</a>.</span><br>
diff --git a/codex/sources.json b/codex/sources.json
index 68f0421..de10e8c 100644
--- a/codex/sources.json
+++ b/codex/sources.json
@@ -45,7 +45,7 @@
   ],
   "inventory": {
     "source": "https://learn.chatgpt.com/docs/developer-commands?surface=cli, https://learn.chatgpt.com/docs/config-file/config-reference, https://learn.chatgpt.com/docs/config-file/config-basic, https://learn.chatgpt.com/docs/hooks",
-    "fetched": "2026-09-13",
+    "fetched": "2026-10-02",
     "note": "slash extracted from the raw developer-commands.md (rendered summaries drop rows); settings from config-reference.md's key table plus requirements.toml from config-basic.md; hooks from hooks.md's documented event list.",
     "slash": [
       "/permissions", "/ide", "/keymap", "/vim", "/setup-default-sandbox", "/sandbox-add-read-dir",
@@ -68,6 +68,7 @@
       "apps.<id>.approvals_reviewer", "apps.<id>.default_tools_approval_mode", "apps.<id>.default_tools_enabled",
       "apps.<id>.destructive_enabled", "apps.<id>.enabled", "apps.<id>.open_world_enabled",
       "apps.<id>.tools.<tool>.approval_mode", "apps.<id>.tools.<tool>.enabled", "auto_review.policy",
+      "auto_review.extra_policy", "guardian_policy_config", "guardian_extra_policy",
       "background_terminal_max_timeout", "browser_use.allow_history_access", "browser_use.default_origin_policy",
       "browser_use.origins.<origin>", "chatgpt_base_url", "check_for_update_on_startup",
       "cli_auth_credentials_store", "compact_prompt", "computer_use.default_app_access",