Codex's TUI writes long goal text, pasted text and images to
`<home>/attachments/<uuid>/` and cites them by absolute path in
`thread_goals.objective`. The script moved the goal rows but not the files, so
a moved goal pointed into the source home and lost its files once that home
was deleted.

Preflight now refuses when a moved thread's goal cites a path under the given
source home's `attachments/` directory or under its real path, naming the
thread and the path. SKILL.md lists the refusal and no longer blurs
`thread_attachments` rows (client JSON, which do move) with attachment files.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

@@ -2138,2 +2169,4 @@
       );
       assertThreadDatabaseEmpty(threadDatabase.destination, threadDatabase, threadIds);
+      if (threadDatabase.prefix === "goals") {
+        requireNoGoalAttachmentReferences(threadDatabase.source, threadIds, args.sourceHome);

@@ -1613,0 +1635,4 @@
+  return `Read the Codex goal objective file at ${home}/attachments/${GOAL_FILE_ID}/goal-objective.md before continuing.`;
+}
+
+// Every file's content hash and every directory below `home`, apart from SQLite's transient WAL companions.

@@ -1613,0 +1717,5 @@
+      assert.equal(refused.stdout, "", name);
+      assert.equal(
+        refused.stderr,
+        `thread ${ROOT_ID} has a goal that references ${fixture.sourceHome}/attachments/${GOAL_FILE_ID}/goal-objective.md; goal attachment files are not moved\n`,
+        name,

@@ -941,0 +958,6 @@
+      const goal = select.get(id) as { objective: string } | undefined;
+      if (goal === undefined) continue;
+      for (const directory of directories) {
+        const marker = `/attachments/${directory}/`;
+        const start = goal.objective.indexOf(marker);
+        if (start === -1) continue;

@@ -941,0 +958,5 @@
+      const goal = select.get(id) as { objective: string } | undefined;
+      if (goal === undefined) continue;
+      for (const directory of directories) {
+        const marker = `/attachments/${directory}/`;
+        const start = goal.objective.indexOf(marker);