Codex App: TAC(Trusted Access for Cyber) cannot be started, cybersecurity-risk block is sticky
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Quiet
- Domain
- authentication, desktop, security
Research direction
Reproduce the flow in the Codex App on Microsoft Windows using the listed steps, then open https://chatgpt.com/cyber and record the verification failure. Use the provided session/work ID when tracing or reporting the issue; done means normal conversations are no longer repeatedly blocked or the TAC verification flow completes for eligible accounts.
Written by the indexing model from the issue text.
Description
What version of the Codex App are you using (From “About Codex” dialog)?
Version 26.715.31925
What subscription do you have?
ChatGPT Pro (individual)
What platform is your computer?
Microsoft Windows NT 10.0.26200.0 x64
What issue are you seeing?
Even after normal usage, the app repeatedly shows cybersecurity-risk blocking prompts.
Attempting to follow the remediation path at https://chatgpt.com/cyber fails with error messages instead of allowing verification.
Full message examples (PII redacted):
"Your conversations have multiple flags for possible cybersecurity risk.""Could not start verification. You may not be eligible for this verification flow right now.""Your identity could not be verified or your account is ineligible at this time."
This blocks normal workflow even for standard, non-offensive tasks (web/page maintenance, automation, coding, devops, server management on owned systems).
What steps can reproduce the bug?
- Sign in with a ChatGPT Pro account in Codex (desktop/app).
- Start normal development/maintenance conversation.
- Observe repeated cybersecurity-risk warnings and/or blocked responses.
- Open the Trusted Access for Cyber page link (
https://chatgpt.com/cyber). - Click through and attempt verification.
- Verification fails with one of:
- "Could not start verification. You may not be eligible for this verification flow right now."
- "Your identity could not be verified or your account is ineligible at this time."
- Repeat conversations remain blocked/flagged.
Session id / work id: 019f7c4c-144f-75f3-890c-bbe4b07fc979
Token/context details: Issue appears immediately; not related to token limit exhaustion.
What is the expected behavior?
Normal usage should continue with only expected safety checks, or
TAC verification flow should be available and complete successfully for eligible accounts.
Additional information
This appears to be a false-positive/eligibility dead-end loop.
Existing remediation path is effectively unreachable.
No new code execution or exploit behavior is involved; this is a workspace availability/security-classifier flow issue.
I can provide screenshots or additional IDs if needed.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.5k
- Avg merge
- 1m
- Merged PRs (30d)
- 1k
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from openai/codex
-
enhancement remote
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
bug CLI windows-os
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
macOS sandbox blocks hw.optional.arm64 sysctl, causing Flutter to misdetect Apple Silicon as x64 Openbug CLI sandbox
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
bug CLI TUI
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
-
CLI config enhancement skills
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
kwakseongjae/auto-hwp#319 ·
-
area:cli bug filter-quality good first issue priority:medium
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
bevyengine/bevy#25861 ·
-
comp-datalake
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ClickHouse/ClickHouse#121222 ·
-
A-linter
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
oxc-project/oxc#26863 ·