diff --git a/changelog.d/fix-gst-768-dev-setup-fresh-clone.md b/changelog.d/fix-gst-768-dev-setup-fresh-clone.md
new file mode 100644
index 000000000..bc2077674
--- /dev/null
+++ b/changelog.d/fix-gst-768-dev-setup-fresh-clone.md
@@ -0,0 +1 @@
+- **`bin/dev-setup` works in a fresh clone again.** It installed dependencies, then setup refused with "project-local Codex destination overlaps the source tree" and exited 1, because setup's overlap guard read gstack's own `.agents/skills` as a foreign project's skills directory pointing into the checkout. Setup now allows that one layout, where the project is the gstack checkout itself and its Codex skills directory is that checkout's own `.agents/skills`. Every other overlap is still refused. That includes a user project whose `.agents/skills` leads into a gstack checkout, a checkout whose `.agents/skills` points at its own root, and `--host codex` run from a dev checkout, which the Codex preflight still stops before any write. test/dev-setup-fresh-clone.test.ts covers the fresh clone and all three refusals (GST-768).