2026-07-01-codex-codex-0-142-2-tightens-powershell-safety-commands-with-a

Codex 0.142.2 tightens PowerShell safety: commands with AST regions the classifier cannot inspect now require approval (channel: tagged-release, 2026-06-25). Operator consequence: Approval/sandbox behavior change: unlowered/uninspectable PowerShell AST regions no longer auto-run and are gated behind approval. Windows operators running Codex non-interactively or in automation may see new approval prompts (or refusals in unattended mode) where PowerShell previously executed. Re-audit unattended Windows pipelines before upgrading. Full receipted detail lives in harvest/watchlist.md.

Receipt

https://github.com/openai/codex/pull/24092

Finding metadata

Confidence: high

Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Finding ID: 2026-07-01-codex-codex-0-142-2-tightens-powershell-safety-commands-with-a

Accepted signals

Codex 0.142.2 gates uninspectable PowerShell behind approval and switches MCP tool discovery to tool-search by default / 2026-07-01

Source links

Primary links, including exact changelog lines when available.

Codex
merged pr2026-07-01-codex-codex-0-142-2-tightens-powershell-safety-commands-with-agithub.com/openai/codex/pull/24092

Versioned source: run artifact