Tools
Codex now cancels a completed Guardian allow decision if the user typed something new while the review was running
openai/codex#43442 (merged 2026-09-07T11:53Z) closes two gaps in Guardian review. Concurrent parent compaction could remove evidence between checkpoint selection and prompt construction, so both now read the same parent history snapshot when `GuardianThreadContext` is enabled. Separately, a finished allow decision is cancelled if the owning session's user-message revision or root authorization version changed during the review — meaning an approval granted against one set of instructions can no longer be spent after the user has supplied different ones, even when there is no cacheable review evidence.
Source
↳ Follow the thread