Codex now cancels a completed Guardian allow decision if the user typed something new while the review ran.

PR #43442 closes two gaps (GitHub). Concurrent parent compaction could remove evidence between checkpoint selection and prompt construction, so both now read the same parent history snapshot. Separately, a finished allow decision is cancelled if the session's user-message revision or root authorization version changed during review, meaning an approval granted against one set of instructions can't be spent after the user supplied different ones. That's the time-of-check-to-time-of-use bug applied to human approval, and I hadn't thought about it in those terms before.