OpenAI Codex
Explicit Codex requests for the scoped GitHub branch-creation workflow.
Exact surface
Project skill and scoped Gated CLI
Controlled-operation scope
Explicit Codex requests for the scoped GitHub branch-creation workflow.
Enforcement path
The project skill invokes the Gated CLI. Policy, approval, execution and receipts run through the hosted API.
Requirements
Pilot access, Node 24, the reviewed project skill, a scoped agent token and an approved GitHub connection.
Verification · 8 September 2026
The actual Codex runtime completed a safe-mode request, approval, simulated execution and receipt check. The test agent was revoked.
Capability status
Explicit project skill and CLI routing
Private previewActual runtime safe-mode request, approval, simulated execution and receipt verified. Live GitHub execution was verified separately through the downloaded CLI.
Native automatic interception
PlannedNot implemented. Direct GitHub tools and credentials outside Gated remain usable; the skill does not block them.
Bypass and runtime limits
Only actions explicitly routed through a Gated-controlled execution path are governed. Direct provider credentials and tools can bypass Gated. No native or universal runtime interception is implemented.
Current limitations
Private preview covers this narrow staging proof. No universal tool interception or runtime identity attestation. A live GitHub write was verified separately with the downloaded CLI, not in this runtime rehearsal.