The codex app-server inside ChatGPT Desktop ships a --forward-ssh-agent feature: your local SSH agent is shared into the agent's execution environment via a stable socket, so agent processes can sign as you, push to your private GitHub repos, and hop anywhere your keys go. What the source shows, what it means, and the two-command hardening that makes silent signing impossible.
ChatGPT Desktop forwards your SSH agent to the machines its agent runs on: your keys, its repos
