Evidence record / paperclip
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-auto
v2026.1001.0 defaults native ACPX, native OpenCode and legacy coding paths to full auto. Missing settings now choose approve-all for native ACPX and allow for native OpenCode. Legacy codex_local defaults to --dangerously-bypass-approvals-and-sandbox instead of workspace-write. Legacy claude_local remote/root paths default to --dangerously-skip-permissions instead of the former allowed-tools list. Legacy opencode_local full auto replaces ambient permission rules with allow. Stored explicit values can opt out. The catalog also has provider-managed modes, so this is not a statement about every provider or launch path. Native Codex retains Paperclip filesystem restrictions and disabled network unless PAPERCLIP_RUNNER_NETWORK_ACCESS=enabled. Provider/account authorization and OS isolation still matter. Local harness shell commands are not necessarily calls through the company connection-tool grant matcher.
Channel: tagged-release. Half: both. Date: 2026-10-02.
Operator consequence: Export agent configs before upgrading from v2026.916.x. Choose native acpxPermissionMode as approve-paperclip, approve-reads or deny-all, or native opencodePermissionMode as ask, when those prompts are intentional. For legacy opencode_local and claude_local the opt-out is dangerouslySkipPermissions: false; for legacy codex_local use dangerouslyBypassApprovalsAndSandbox: false. Native and legacy settings are not interchangeable. Restrictive sandbox/profile/approval/network arguments suppress defaulted Codex bypass, but explicit bypass=true wins. The intended gain is unattended execution without an unanswered provider prompt. The resulting audit needs to distinguish provider execution containment from Paperclip connection permissions; neither covers every operation alone.
Receipt
- https://github.com/paperclipai/paperclip/releases/tag/v2026.1001.0
- https://github.com/paperclipai/paperclip/blob/v2026.1001.0/packages/adapter-utils/src/paperclip-runner-permissions.ts#L48-L136
- https://github.com/paperclipai/paperclip/blob/v2026.1001.0/packages/adapters/codex-local/src/server/codex-args.ts#L53-L80
- https://github.com/paperclipai/paperclip/blob/v2026.1001.0/packages/adapters/claude-local/src/server/permissions.ts#L7-L23
- https://github.com/paperclipai/paperclip/blob/v2026.1012.0/packages/adapters/opencode-local/src/server/runtime-config.ts#L105-L117
- https://github.com/paperclipai/paperclip/blob/v2026.1012.0/packages/paperclip-runner/src/drivers/codex/codex-security-config.ts#L187-L220
- https://github.com/paperclipai/paperclip/pull/13693
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-auto
Source links
Primary links, including exact changelog lines when available.
- github release2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autopaperclipai/paperclip / v2026.1001.0tagged commit file2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autopaperclipai/paperclip / packages/adapter-utils/src/paperclip-runner-permissions.ts#L48-L136tagged commit file2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autopaperclipai/paperclip / packages/adapters/codex-local/src/server/codex-args.ts#L53-L80tagged commit file2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autopaperclipai/paperclip / packages/adapters/claude-local/src/server/permissions.ts#L7-L23tagged commit file2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autopaperclipai/paperclip / packages/adapters/opencode-local/src/server/runtime-config.ts#L105-L117tagged commit file2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autopaperclipai/paperclip / packages/paperclip-runner/src/drivers/codex/codex-security-config.ts#L187-L220merged pr2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-autogithub.com/paperclipai/paperclip/pull/13693
Versioned source: run artifact