Evidence record / codex
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-codex-plugin-hook-approval-now-checks-file-contents-before-execution
Plugin hook approval now checks file contents before execution. The hook path recomputes plugin content hashes and compares the trusted contents and declaration before running a hook. A changed plugin requires approval again. The compatibility path matters: older declaration-only approvals are migrated by establishing a content baseline on first use; that migration is not retroactive proof that those bytes were previously reviewed.
Channel: tagged-release. Half: both. Date: 2026-10-23.
Operator consequence: On 0.164.0, test approving a plugin, changing its hook file, and attempting the hook again. Re-audit existing approvals when upgrading, especially the first-use migration. The durable primitive is approval bound to contents; a one-time human review is useful only if its object stays the same.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-codex-plugin-hook-approval-now-checks-file-contents-before-execution
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-codex-plugin-hook-approval-now-checks-file-contents-before-executiongithub.com/openai/codex/commit/2bf2bdf82c33f4c66ba3f0767b8e4b6a933aac40tagged commit file2026-10-24-codex-plugin-hook-approval-now-checks-file-contents-before-executionopenai/codex / codex-rs/hooks/src/engine/plugin_trust.rs
Versioned source: run artifact