Evidence record / codex
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-codex-guardian-v2-invalidates-cached-approval-when-unscored-access-widens
Guardian V2 invalidates cached approval when unscored access widens. An unscored exec_command requesting additional permissions could reuse a V2 approval that did not cover the wider access. For default-namespace exec_command with with_additional_permissions, the AgeScore path now invalidates the cached score as a scoring failure.
Channel: tagged-release (Guardian V2 remains off by default). Half: defect. Date: 2026-09-22 (0.156.0).
Operator consequence: Opt-in Guardian V2 users should run 0.156.0 or later and verify widened unscored actions fail closed. This fix does not enable V2 for default users.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-codex-guardian-v2-invalidates-cached-approval-when-unscored-access-widens
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact