{"ok":true,"ruleset":{"rulesetVersion":"2026-09-05.21","checkpoints":[{"id":"REACHABLE","label":"Upstream request boundary"},{"id":"ELIGIBLE","label":"Availability"},{"id":"INSTALLED","label":"Installation"},{"id":"DISCOVERED","label":"Discovery"},{"id":"PARSED","label":"Parsing"},{"id":"CONFIG_RESOLVED","label":"Configuration"},{"id":"DEPENDENCY_READY","label":"Local dependency"},{"id":"CONNECTED","label":"Connection"},{"id":"AUTHENTICATED","label":"Authentication"},{"id":"REGISTERED","label":"Registration"},{"id":"EXPOSED","label":"Session exposure"},{"id":"ACTIVATED","label":"Task activation"},{"id":"AUTHORIZED","label":"Authorization"},{"id":"EXECUTED","label":"Execution"},{"id":"PERSISTED","label":"Persistence"}],"counts":{"rules":16,"signals":53,"explicitPassSignals":9,"checkpoints":15},"rules":[{"id":"reachability.upstream-request.v1","checkpoint":"REACHABLE","checkpointLabel":"Upstream request boundary","categories":["mcp","skill","browser","auth","unsure"],"title":"Upstream request boundary","summary":"The earliest supported boundary is before the capability chain: the OpenAI/ChatGPT/Codex host request itself is failing, throttled, or returning an upstream status.","precondition":true,"evidenceRequirements":["platform_failure","corroboration"],"maximumConfidence":"medium","signals":[{"id":"upstream_server_error","label":"An OpenAI, ChatGPT, or Codex host endpoint answered with a server-side HTTP status (5xx).","group":"platform_failure"},{"id":"upstream_not_found_endpoint","label":"An OpenAI, ChatGPT, or Codex host endpoint answered 404 before a capability-specific result was returned.","group":"platform_failure"},{"id":"upstream_rate_limited","label":"An OpenAI, ChatGPT, or Codex host request reported throttling, quota, or capacity limits.","group":"platform_failure"},{"id":"upstream_stream_transport","label":"A stream or transport failure is explicitly tied to an OpenAI, ChatGPT, or Codex host request.","group":"platform_failure"},{"id":"plain_request_also_fails","label":"A plain request without MCP, skill, connector, browser action, or other capability fails the same way.","group":"corroboration"},{"id":"unchanged_and_previously_working","label":"The same request worked shortly before and the evidence states that no local configuration changed.","group":"corroboration"},{"id":"broad_platform_requests_fail","label":"Multiple plain Codex/OpenAI/ChatGPT requests are reported failing, not only one capability call.","group":"corroboration"},{"id":"status_page_reports_incident","label":"The submitted evidence says the official OpenAI status page reports an incident or degraded service.","group":"corroboration"}],"nextEvidence":["Exact HTTP/error status and endpoint host","Result of one plain request without the capability in the same surface/account/network","Failure start time and whether the official status page reports a scoped incident"]},{"id":"eligibility.explicit-unavailable.v1","checkpoint":"ELIGIBLE","checkpointLabel":"Availability","categories":["mcp","skill","browser","auth","unsure"],"title":"Availability","summary":"The earliest supported failure is availability: the current account, workspace, region, or surface is reporting that the capability is not eligible to start.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"explicit_unavailable","label":"The product or workspace explicitly reports that the capability is unavailable or disabled.","group":null},{"id":"workspace_policy","label":"A workspace, organization, administrator, or plan policy is named as the blocker.","group":null},{"id":"region_unavailable","label":"The evidence explicitly names regional unavailability.","group":null}],"nextEvidence":["Exact availability or policy text","Failing Codex surface","Workspace/account where the capability is expected"]},{"id":"discovery.capability-not-found.v1","checkpoint":"DISCOVERED","checkpointLabel":"Discovery","categories":["mcp","skill","unsure"],"title":"Discovery","summary":"The earliest supported failure is discovery: Codex is not finding the configured or installed capability in the scope being inspected.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"capability_not_found","label":"The loader or surface reports that the named server, connector, skill, or plugin was not found or discovered.","group":null},{"id":"installed_missing","label":"The user says the capability is installed but it is still missing from discovery.","group":null},{"id":"path_missing","label":"A capability file or directory is explicitly missing.","group":null}],"nextEvidence":["Failing surface and workspace/project","Expected capability name","Whether the manifest or server entry exists in that same scope"]},{"id":"parse.manifest-schema.v1","checkpoint":"PARSED","checkpointLabel":"Parsing","categories":["mcp","skill","unsure"],"title":"Parsing","summary":"The earliest supported failure is parsing: the capability was found, but its definition could not be read as a valid manifest, schema, or frontmatter document.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"frontmatter_parse","label":"The evidence names a YAML/frontmatter parse failure.","group":null},{"id":"manifest_schema","label":"The evidence names an invalid manifest or schema field.","group":null},{"id":"syntax_location","label":"A line/column syntax location is reported for a capability definition.","group":null}],"nextEvidence":["Exact parser message","Reported field or line/column","Small sanitized definition fragment around that location"]},{"id":"config.deprecated-codex-mcp-server.v1","checkpoint":"CONFIG_RESOLVED","checkpointLabel":"Configuration","categories":["mcp","unsure"],"title":"Configuration","summary":"The earliest supported failure is command/configuration resolution: the workflow still targets the legacy codex mcp-server entrypoint.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"deprecated_codex_mcp_server","label":"The evidence names the legacy codex mcp-server command and a deprecation or command-resolution failure.","group":null}],"nextEvidence":["Exact command or integration field that invokes the legacy entrypoint","Current Codex version and surface","First message after replacing only that entrypoint"]},{"id":"config.invalid-or-unresolved.v1","checkpoint":"CONFIG_RESOLVED","checkpointLabel":"Configuration","categories":["mcp","skill","browser","auth","unsure"],"title":"Configuration","summary":"The earliest supported failure is configuration resolution: the capability definition is present, but the active surface cannot resolve a valid configuration from it.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"invalid_config","label":"The evidence explicitly reports invalid or unreadable configuration.","group":null},{"id":"unknown_config_key","label":"An unknown, unsupported, or missing configuration key is named.","group":null},{"id":"transport_config","label":"The configured transport or endpoint shape is rejected before connection.","group":null}],"nextEvidence":["Exact invalid key/field/transport message","Failing surface and configuration scope","Minimal sanitized configuration block"]},{"id":"dependency.executable-missing.v1","checkpoint":"DEPENDENCY_READY","checkpointLabel":"Local dependency","categories":["mcp","skill","browser","unsure"],"title":"Local dependency","summary":"The earliest supported failure is local dependency readiness: the configured runtime, executable, or process cannot be found or started.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"spawn_enoent","label":"The host reports that a configured executable could not be started because it was not found.","group":null},{"id":"runtime_missing","label":"A required local runtime or dependency is explicitly missing.","group":null},{"id":"permission_start","label":"The configured process cannot be started at the operating-system boundary.","group":null}],"nextEvidence":["Exact executable/runtime named in the error","Failing surface","Whether that exact executable is visible in the same environment"]},{"id":"connection.transport-or-initialize.v1","checkpoint":"CONNECTED","checkpointLabel":"Connection","categories":["mcp","browser","auth","unsure"],"title":"Connection","summary":"The earliest supported failure is connection: the host cannot complete a stable transport or initialization handshake with the capability provider.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"connection_refused","label":"The connection was explicitly refused or no listener was reachable.","group":null},{"id":"initialize_failed","label":"Protocol initialization or the handshake failed.","group":null},{"id":"transport_closed","label":"The transport or server closed before a stable connection was established.","group":null},{"id":"connection_timeout","label":"A connection or startup timeout is reported.","group":null}],"nextEvidence":["Whether the provider process/endpoint starts","Exact initialization/transport message","Configured transport type without credentials"]},{"id":"authentication.oauth-or-token.v1","checkpoint":"AUTHENTICATED","checkpointLabel":"Authentication","categories":["mcp","browser","auth","unsure"],"title":"Authentication","summary":"The earliest supported failure is authentication: connection reached an identity boundary, but the current session did not establish a valid authenticated principal.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"http_401","label":"The provider returns HTTP 401 or explicitly says the session is unauthenticated.","group":null},{"id":"invalid_grant","label":"The OAuth/token exchange reports an invalid, expired, or revoked grant/token.","group":null},{"id":"oauth_callback","label":"The OAuth callback or authorization-code exchange failed.","group":null},{"id":"sign_in_required","label":"The surface explicitly requests sign-in or reconnection.","group":null}],"nextEvidence":["HTTP status or OAuth stage","Failing surface and workspace/account","Whether the callback returned to the initiating surface"]},{"id":"registration.unknown-tool.v1","checkpoint":"REGISTERED","checkpointLabel":"Registration","categories":["mcp","skill","browser","unsure"],"title":"Registration","summary":"The earliest supported failure is registration: the provider can be reached, but the expected tool or action is not registered in the provider result the host can consume.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"unknown_tool","label":"The host reports an unknown, unregistered, or missing tool/action name.","group":null},{"id":"zero_tools","label":"The provider's tool listing completes but returns no tools.","group":null},{"id":"expected_tool_absent","label":"A named expected tool is absent from a successful provider listing.","group":null}],"nextEvidence":["Sanitized provider tool/action names","Expected exact name","Provider version/configuration mode"]},{"id":"exposure.surface-mismatch.v1","checkpoint":"EXPOSED","checkpointLabel":"Session exposure","categories":["mcp","skill","browser","auth","unsure"],"title":"Session exposure","summary":"The earliest supported failure is surface-specific exposure: the capability is evidenced in one Codex surface but not in the failing surface/session.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"works_cli_not_desktop","label":"The capability works in CLI but is missing or failing in Desktop.","group":null},{"id":"works_desktop_not_cli","label":"The capability works in Desktop but is missing or failing in CLI.","group":null},{"id":"one_surface_only","label":"The evidence explicitly says only one Codex surface fails or only one works.","group":null}],"nextEvidence":["Working and failing surface","Account/workspace in each","Capability/provider version in each","Whether the failing session was created after the change"]},{"id":"exposure.connected-but-hidden.v1","checkpoint":"EXPOSED","checkpointLabel":"Session exposure","categories":["mcp","skill","browser","unsure"],"title":"Session exposure","summary":"The earliest supported failure is session exposure: the provider is connected or registering capabilities, but the active Codex session is not making the expected capability available.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"connected_hidden","label":"The provider is connected/initialized, but the capability is not visible in the active Codex session.","group":null},{"id":"listed_provider_hidden_host","label":"The provider returns registrations, but Codex does not show them in the current session.","group":null},{"id":"inspector_vs_codex","label":"The capability appears in an inspector/provider test but not in Codex.","group":null}],"nextEvidence":["Sanitized provider tool/capability names","Target Codex surface/workspace","Whether a genuinely new session was created"]},{"id":"activation.loaded-but-not-triggered.v1","checkpoint":"ACTIVATED","checkpointLabel":"Task activation","categories":["skill","browser","unsure"],"title":"Task activation","summary":"The earliest supported failure is task activation: the capability is loaded/visible, but the current task is not selecting or triggering it.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"loaded_not_triggered","label":"The skill/plugin is loaded or visible, but the task does not activate it.","group":null},{"id":"manual_works_auto_not","label":"Manual selection works but automatic task activation does not.","group":null}],"nextEvidence":["Whether explicit selection works","One representative task","Current sanitized activation description or scope"]},{"id":"authorization.permission-or-sandbox.v1","checkpoint":"AUTHORIZED","checkpointLabel":"Authorization","categories":["mcp","skill","browser","auth","unsure"],"title":"Authorization","summary":"The earliest supported failure is authorization: the capability is reachable or activated, but the requested action is not allowed by the current provider scope, workspace policy, approval, or sandbox boundary.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"http_403","label":"The provider or host returns HTTP 403/forbidden after identity is known.","group":null},{"id":"permission_denied","label":"The requested capability action is explicitly denied by permission, policy, or sandbox.","group":null},{"id":"approval_repeats","label":"Approval is requested repeatedly or does not persist.","group":null},{"id":"scope_missing","label":"A required authorization scope or role is explicitly missing.","group":null}],"nextEvidence":["Exact denied action and status","Provider/workspace and authenticated role","Named missing scope/policy or approval lifetime"]},{"id":"execution.action-failed.v1","checkpoint":"EXECUTED","checkpointLabel":"Execution","categories":["mcp","skill","browser","auth","unsure"],"title":"Execution","summary":"The earliest supported failure is execution: the capability is available far enough to invoke, but the representative action does not complete.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"tool_call_failed","label":"A capability/tool action is invoked but returns an execution error.","group":null},{"id":"execution_error","label":"The evidence explicitly identifies the execution stage.","group":null},{"id":"visible_then_fails","label":"The capability is visible/selectable but fails only when run.","group":null}],"nextEvidence":["Small safe action invoked","Error source: Codex, provider, or downstream service","Status/error class and elapsed time"]},{"id":"persistence.after-restart-or-update.v1","checkpoint":"PERSISTED","checkpointLabel":"Persistence","categories":["mcp","skill","browser","auth","unsure"],"title":"Persistence","summary":"The supported boundary is persistence/regression: the capability is reported working in an earlier session/version or temporarily, then absent or failing after restart, reopen, or update.","precondition":false,"evidenceRequirements":[],"maximumConfidence":"high","signals":[{"id":"worked_before_update","label":"The capability worked before an update and stopped afterward.","group":null},{"id":"lost_after_restart","label":"The capability works temporarily but is lost after restart/reopen/new session.","group":null},{"id":"recent_update_context","label":"The user selected an after-update context.","group":null}],"nextEvidence":["Previous and current host version","Provider/capability version","Surface, OS, workspace/account","First checkpoint that differs in a controlled new session"]}]},"manifest":{"schemaVersion":"capability-evidence-registry.v2","corpusVersion":"2026-09-02.w2-published-2","generatedAt":"2026-09-02T23:36:34.000Z","policyVersion":"capability-evidence-policy.v2","counts":{"sourceVerified":7,"candidateIssues":2,"humanReviewed":5,"publishedIncidents":2,"rejectedRecords":2,"indexableIncidents":2},"reviewStates":["candidate","source_verified","human_reviewed","published","rejected","stale"],"behaviorLevels":[{"id":"DECLARED","rank":0,"meaning":"A first-party source states intended behavior or a supported interface."},{"id":"PARSED","rank":1,"meaning":"A bounded definition or response passed structural parsing."},{"id":"CONNECTED","rank":2,"meaning":"A process or endpoint completed a connection or protocol handshake."},{"id":"DISCOVERED","rank":3,"meaning":"The host discovered or listed the capability."},{"id":"EXPOSED","rank":4,"meaning":"The capability appeared in the active model session."},{"id":"ACTIVATED","rank":5,"meaning":"A representative task selected or triggered the capability."},{"id":"EXECUTED","rank":6,"meaning":"A bounded representative action completed or failed at execution."},{"id":"VERIFIED","rank":7,"meaning":"A fix was followed by a recorded recheck in the same scoped environment."}],"sourceLevels":[{"id":"A","meaning":"Host- or lab-observed behavior with a reproducible environment vector."},{"id":"B","meaning":"Official first-party documentation, reference, changelog, or maintainer-confirmed record."},{"id":"C","meaning":"Unconfirmed issue in the official upstream repository or source-linked user observation."},{"id":"D","meaning":"Unverified community report; never sufficient for a public compatibility claim."}],"publicationRules":{"candidate_indexable":false,"source_verified_incident_indexable":false,"human_reviewed_incident_indexable":true,"published_requires":["canonical_symptom","first_checkpoint","environment","claim","source_url","observed_at","retrieved_at","confidence","fix","verification","rollback_or_stop_condition","limitations","confirmed_by_human"]},"candidateQueue":{"repository":"openai/codex","count":2,"reviewStatus":"candidate","indexable":false},"humanReviewedQueue":{"count":3,"indexable":false},"rejectedQueue":{"count":2,"indexable":false},"publishedIncidents":[{"id":"openai-codex-issue-15508","path":"/incidents/openai-codex-issue-15508","title":"Reported case: MCP tools disappear from an existing Codex session but work in a new chat","description":"A human-reviewed reported case scoped to Codex App/extension 26.318.11754 on Windows, where a new chat restores MCP access without changing configuration.","canonicalSymptom":"An existing Codex IDE chat loses access to MCP tools after time or reload while a new chat exposes them immediately.","firstCheckpoint":"PERSISTED","environment":{"host":"codex","surfaces":["ide","new chat/session in the same surface"],"operatingSystems":["Windows 10.0.26200"],"versionScope":"Codex App/extension 26.318.11754","comparisonSurface":"new chat/session in the same surface","accountScope":"ChatGPT Plus","workspaceScope":"existing long-running chat versus new chat"},"claim":"A contributor reports MCP availability changing across Codex sessions and surfaces after a restart or environment change.","source":{"title":"MCP tools reported disappearing in existing Codex sessions after environment changes","publisher":"openai/codex contributor report","url":"https://github.com/openai/codex/issues/15508"},"observedAt":"2026-03-23","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-10-01T23:59:59.000Z","confidence":"reported_case","fix":"Start a genuinely new chat in the same Codex surface without changing MCP configuration.","verification":"The same representative MCP task succeeds immediately in the new chat while the old chat remains unable to access the tools.","rollbackOrStopCondition":"If a new chat also lacks the tools, stop using this persistence record and re-diagnose discovery, connection, authentication, registration, or exposure.","limitations":["The report supports recording session and version boundaries, not assigning a product-wide regression.","A different surface, account, workspace, or bundled version can explain the observation.","The upstream issue was closed as a duplicate; closure is not evidence of a fixed version."],"publishedAt":"2026-09-02T23:36:34.000Z"},{"id":"openai-codex-issue-30343","path":"/incidents/openai-codex-issue-30343","title":"Reported case: MCP works in Codex CLI but is unavailable in Codex Desktop","description":"A human-reviewed reported case scoped to Codex Desktop 26.623.5175.0 and standalone CLI 0.142.0 on Windows, with a bounded CLI workaround and verification.","canonicalSymptom":"The same MCP configuration can execute a tool in standalone Codex CLI but the Codex Desktop thread reports it unavailable.","firstCheckpoint":"EXPOSED","environment":{"host":"codex","surfaces":["desktop","standalone CLI / codex exec"],"operatingSystems":["Windows 10.0.26200 x64"],"versionScope":"Desktop 26.623.5175.0; standalone CLI 0.142.0; bundled CLI 0.142.3","comparisonSurface":"standalone CLI / codex exec","accountScope":"custom provider, details omitted","workspaceScope":"same user config.toml"},"claim":"A contributor reports the same MCP configuration working through standalone Codex CLI while the Codex Desktop session reports the tool unavailable.","source":{"title":"MCP tools reported available in CLI but unavailable in Codex Desktop","publisher":"openai/codex contributor report","url":"https://github.com/openai/codex/issues/30343"},"observedAt":"2026-06-26","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-10-01T23:59:59.000Z","confidence":"reported_case","fix":"Use the standalone Codex CLI/codex exec surface for the same bounded task while retaining the original configuration unchanged.","verification":"The named MCP tool completes the representative call in standalone CLI while the contemporaneous Desktop thread still reports it unavailable.","rollbackOrStopCondition":"If the standalone CLI also cannot call the tool, stop using this record and re-diagnose registration, authentication, or execution.","limitations":["The report supports comparing surfaces; it does not establish a universal Desktop defect.","The two surfaces can still differ in bundled version, process environment, session, account, or workspace."],"publishedAt":"2026-09-02T23:36:34.000Z"}],"sources":[{"id":"openai-codex-mcp-docs","title":"Official Codex MCP documentation","url":"https://developers.openai.com/codex/mcp","sourceType":"official_documentation","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI documents that Codex MCP configuration lives in config.toml, can be user- or trusted-project-scoped, is shared by the supported Codex clients, and can be inspected through MCP settings, /mcp, or codex mcp list. OAuth servers can be authenticated with codex mcp login.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["mcp","auth"],"checkpoints":["DISCOVERED","CONFIG_RESOLVED","CONNECTED","AUTHENTICATED","REGISTERED","EXPOSED"],"limitations":["This documents intended configuration and inspection paths; it does not prove that a submitted server connected or exposed tools.","A working CLI observation does not by itself prove the active Desktop or IDE session exposes the same tool set."]},{"id":"openai-codex-build-skills","title":"Official Codex skill-building documentation","url":"https://developers.openai.com/codex/build-skills","sourceType":"official_documentation","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI documents the repository, user, admin, and system locations from which Codex loads skills, and advises restarting Codex when a changed skill does not appear.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["skill"],"checkpoints":["DISCOVERED","PARSED","EXPOSED","ACTIVATED","PERSISTED"],"limitations":["A discovered or parsed skill is not automatically proven to activate for a representative task.","The document does not establish runtime compatibility for a particular skill or plugin."]},{"id":"openai-codex-config-basics","title":"Official Codex configuration basics","url":"https://developers.openai.com/codex/config-basic","sourceType":"official_documentation","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI documents user-level and project-level Codex configuration layers and how to open config.toml from supported surfaces.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["mcp","skill","browser","auth","unsure"],"checkpoints":["DISCOVERED","PARSED","CONFIG_RESOLVED","DEPENDENCY_READY"],"limitations":["The existence of a configuration file does not prove the failing surface read the intended layer.","Environment, workspace trust, reload timing, and process inheritance can still differ."]},{"id":"openai-codex-config-reference","title":"Official Codex configuration reference","url":"https://developers.openai.com/codex/config-reference","sourceType":"official_reference","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI provides the current searchable reference for config.toml and requirements.toml fields.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["mcp","skill","browser","auth","unsure"],"checkpoints":["PARSED","CONFIG_RESOLVED","DEPENDENCY_READY"],"limitations":["The reference can validate a field name or value shape but cannot establish which process or surface loaded it.","Capability Lab does not synthesize undocumented replacement keys or commands."]},{"id":"openai-codex-rules","title":"Official Codex command rules documentation","url":"https://developers.openai.com/codex/rules","sourceType":"official_documentation","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI documents rules for controlling commands outside the Codex sandbox and marks the rules feature as experimental.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["auth","browser","mcp","unsure"],"checkpoints":["AUTHORIZED","EXECUTED","PERSISTED"],"limitations":["A rule or approval boundary is not the same as authentication or capability discovery.","Because the feature is experimental, current syntax and behavior require freshness checks."]},{"id":"openai-codex-windows-sandbox","title":"Official Codex Windows sandbox guidance","url":"https://developers.openai.com/codex/windows/windows-sandbox","sourceType":"official_documentation","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI documents Windows sandbox permission warnings and advises restarting Codex or rerunning sandbox setup after correcting the listed permissions.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["auth","browser","unsure"],"checkpoints":["ELIGIBLE","AUTHORIZED","EXECUTED","PERSISTED"],"limitations":["This guidance applies to the documented Windows sandbox condition, not every permission or execution failure.","Users should not broadly weaken filesystem permissions to make a capability pass."]},{"id":"openai-codex-developer-commands","title":"Official Codex developer command reference","url":"https://developers.openai.com/codex/developer-commands","sourceType":"official_reference","sourceLevel":"B","behaviorLevel":"DECLARED","observedAt":"2026-09-01","retrievedAt":"2026-09-01T16:00:00.000Z","validUntil":"2026-11-30T23:59:59.000Z","freshness":"current","claim":"OpenAI lists codex mcp and codex plugin as stable management commands and marks codex mcp-server as deprecated in favor of the Codex app server.","confidence":"official_declaration","reviewStatus":"source_verified","categories":["mcp","skill","auth","unsure"],"checkpoints":["DISCOVERED","CONFIG_RESOLVED","AUTHENTICATED","REGISTERED"],"limitations":["The command maturity table does not prove that an installed capability is available in a particular active session.","The deprecated codex mcp-server command is distinct from configuring third-party MCP servers through codex mcp."]}],"limits":["The manifest contains official method context, aggregate non-public queues, and only separately published reported cases; it never contains private reports.","Candidate and blocked human-reviewed issue records do not become diagnosed incidents or confidence upgrades.","Human-reviewed records remain scoped observations; publication requires a separate explicit gate and never becomes a universal compatibility verdict."]},"requestId":"a39860bb09284af4"}