Codex can read a CLAUDE.md in a workspace or when configured to treat it as an instruction file. This test concerned Muse automatically loading personal files from ~/.codex and ~/.claude outside the selected workspace and sending their contents in the first provider request.

A file stored in ~/.claude was written for Anthropic. A file stored in ~/.codex was written for OpenAI. Muse treats the existence of those files as permission to copy their contents to Meta. It displays a notice and provides an opt-out, but never asks before sending them. That cross-vendor assumption is the privacy issue.