Codex now enforces network policy on every redirect, streamed body read and open WebSocket

GitHub·medium signalXBlueskyLinkedInCopy link

openai/codex #47389 (merged 2026-09-22) moves managed HTTP clients onto a policy-aware request builder. Every redirect destination is checked before routing, a network permit is held while response bodies stream, and WebSocket reads and writes run under revocable permits. Policy denials are now non-retryable and survive error handling. Four follow-ups (#47407, #47408, #47410, #47411) apply the same policy to app-server, AWS auth, telemetry and remote-control traffic. Before this, a redirect or a socket that was already open could get around a destination allowlist.