Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-23 · source-backed
PR #47361 restricts the sandbox token's default DACL to the runner's logon SID, removing Everyone and capability SID grants, and adds an OWNER RIGHTS entry stripping the owner's implicit WRITE_DAC, with an AccessCheck regression test confirming a second logon on the same account can't read process memory or create threads. Separately, PR #44617 stops an unscored exec_command requesting extra sandbox permissions from reusing an approval score that never covered them. That one merged September 10 and only reached a stable release on the 22nd.
Each link below shares sources, entities, or timing with this story.
A standalone macOS and Windows desktop beta released September 14, moving the open-source agent out of the VS Code extension slot; the releases page shows Desktop v0.0.26 on September 11, v0.0.27 on September 13 and v0.0.28 on September 15, so it's shipping daily (GitHub). It...
The 60 commits between rust-v0.155.0-alpha.4 and alpha.6, published September 15 with an empty release body as every Codex alpha has, include configuring the Guardian prompt template (#45516), Guardian reviewers routed through ThreadManager for inline parents (#45518), reviewe...
PR #45185, merged September 12, attaches direct-call records to outputs before they enter history and sets tool_calls_complete only when an invocation's arguments are fully recorded, regardless of whether the tool succeeded. It tracks call IDs that bypass dispatch specifically...
Tagged September 9 with isolated checkouts for new or forked sessions plus browse and resume across them. The release also lets you answer questions inline while Codex keeps working without losing your main draft, and gives Windows sessions a shared background Codex server wit...
PR #47094, merged September 21, applies DescriptorPolicy::StdioOnly when launching local stdio MCP servers, so unrelated parent file descriptors stop propagating into the server and its descendants, with integration tests checking that inheritable pipes, sockets and files are...
Geoffrey Huntley released underclass September 20, a Rust proxy exposing /v1/responses, /v1/chat/completions and /v1/models over N ChatGPT/Codex and M Copilot subscriptions added via OAuth device flow. Sessions pin to one account so the upstream prompt cache stays warm, exhaus...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.