When Omnigent's policy server is down, the wrapped harness decides
PR 6429 (merge 3f0d9771, in v0.13.0 and not v0.12.0) makes native Claude Code and Codex tool calls fail to ask rather than deny when Omnigent's policy server is unreachable, so the wrapped harness's own dialog decides; prompt submission still fails closed. Since v0.12.0 Omnigent answers Claude Code's bypass-permissions consent prompt for it, and the default Codex Auto mode routes escalations to Codex's own auto-reviewer. Three advisories published 2026-09-16 (GHSA-598r critical, GHSA-q5jc and GHSA-p5x3 high) let an uploaded bundle escape the workspace or run Python on the server; all are fixed in v0.14.0 (2026-09-15).
What this changes for operators
- Upgrade shared Omnigent servers to v0.14.0. Anyone who can upload an agent bundle could get a host shell before it.
- Know which layer refuses: during a policy-server outage your Omnigent deny rules do not apply to native tool calls; the harness’s permission mode does. Set that mode as if Omnigent were absent.
- Evidence that would settle residual: a tag containing the editor shell-proxy fix (#7619), which reached v0.15.0 on 2026-09-22, after this window.
Primary sources
- merged_pr 2026-09-21-omnigent-governance-layering-on-policy-server-outage-native-claude-codex-tool-calls-now-defer-to github.com/omnigent-ai/omnigent/pull/6429
- merged_pr 2026-09-21-omnigent-omnigent-now-answers-wrapped-harnesses-safety-prompts-and-flips-their-approval-routing github.com/omnigent-ai/omnigent/pull/5864
- official_docs 2026-09-21-omnigent-three-bundle-upload-advisories-published-2026-09-16-all-fixed-in-v0-14-0-by-one github.com/omnigent-ai/omnigent/security/advisories/GHSA-q5jc-8hqr-9hm4
Signal metadata
Source findings
- 2026-09-21-omnigent-governance-layering-on-policy-server-outage-native-claude-codex-tool-calls-now-defer-to 2026-09-21-omnigent-governance-layering-on-policy-server-outage-native-claude-codex-tool-calls-now-defer-to
- 2026-09-21-omnigent-omnigent-now-answers-wrapped-harnesses-safety-prompts-and-flips-their-approval-routing 2026-09-21-omnigent-omnigent-now-answers-wrapped-harnesses-safety-prompts-and-flips-their-approval-routing
- 2026-09-21-omnigent-three-bundle-upload-advisories-published-2026-09-16-all-fixed-in-v0-14-0-by-one 2026-09-21-omnigent-three-bundle-upload-advisories-published-2026-09-16-all-fixed-in-v0-14-0-by-one
Featured in
- Before the First Turn / 2026-09-21
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-09-21-omnigent-policy-outage-falls-through-to-the-harness
Research evidence and publication history are open in the repository.