Finding / codex
2026-10-13-codex-guardian-v2-invalidates-cached-approval-when-unscored-access-widens
Guardian V2 invalidates cached approval when unscored access widens. An unscored exec_command requesting additional permissions could reuse a V2 approval that did not cover the wider access. For default-namespace exec_command with with_additional_permissions, the AgeScore path now invalidates the cached score as a scoring failure.
Channel: tagged-release (Guardian V2 remains off by default). Half: defect. Date: 2026-09-22 (0.156.0).
Operator consequence: Opt-in Guardian V2 users should run 0.156.0 or later and verify widened unscored actions fail closed. This fix does not enable V2 for default users.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-codex-guardian-v2-invalidates-cached-approval-when-unscored-access-widens
Source links
Primary links, including exact changelog lines when available.