Codex makes Code Mode wrappers transparent to Guardian policy and adds read-only policy to MCP tool requests

GitHub·medium signalXBlueskyLinkedInCopy link

In the same alpha.10 to alpha.16 window, Codex centralized Guardian policy resolution in config and protocol (#45957), made Code Mode wrappers transparent to Guardian model policies (#45915), added read-only policy support to MCP tool requests (#46042), added per-app tool exposure configuration (#46035), and let callers disable executor skills per environment (#46015). The Code Mode change is the notable one: wrapping a call in generated code was a way for an action to present differently to the policy layer than the underlying tool call would, and that gap is now closed.