openai / openai/codex

Auto classifier blocking daybreak blue building temporary scripts to probe the impact of changes

Open
#38,147 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug CLI safety-check
Dominant language
Rust
Stars
125k
Forks
19.5k
PR merge metrics
PR metrics pending

Description

What version of Codex CLI is running?

codex-cli 0.147.0

What subscription do you have?

Pro 20x

Which model were you using?

gpt-daybreak-blue-latest

What platform is your computer?

Darwin 25.6.0 arm64 arm

What terminal emulator and version are you using (if applicable)?

No response

Codex doctor report

What issue are you seeing?

Following the release of the new daybreak blue model and per the release announcement "We are strongly encouraging Daybreak customers using Codex to switch from full-access mode to auto-review mode" I have codex configured to use auto_review.

approval_policy = "on-request"
approvals_reviewer = "auto_review"

I was using daybreak to make changes to a scanner that gates if JavaScript is safe or represents a known or unknown risk. The scanner was resolving to unknown risk in an area that should have been gated to known risk and other areas that should have been gated to safe. Daybreak had successfully evaluated the potential risk and was using a temporary script to evaluate possible changes. The auto-classifier rejected this local script as "not fixing the production issue" until all attempts were exhausted.

What steps can reproduce the bug?

Uploaded thread: 019ff2f0-8320-77a2-97ea-affebacf4066

What is the expected behavior?

I would expect the classifier not to prevent a cyber-aware model being able to use diagnostic to probe changes prior to implementation in a security critical path.

Additional information

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the uploaded thread 019ff2f0-8320-77a2-97ea-affebacf4066 and the auto_review configuration shown in the report. Trace how the classifier evaluates temporary diagnostic scripts used while changing a JavaScript scanner. Done means the reported diagnostic workflow is no longer incorrectly blocked while production-fix attempts remain appropriately classified.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, rust
Domain
cli, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.