[macOS] Sol attempts to use Bank Reset without explicit user permission
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.4k
- PR merge metrics
- PR metrics pending
Description
Environment
- Product: Codex desktop experience in ChatGPT for macOS
- App version:
26.825.32147(released Aug 28, 2026) - Model:
5.6 Sol Ultra - Subscription: ChatGPT Pro
- macOS: Tahoe
26.6.2 - Hardware: 16-inch MacBook Pro, Apple M5 Max, 128 GB memory
- Date observed: Aug 29, 2026
- Feedback ID: unavailable because the in-product feedback upload failed
Description
The Sol model attempted to interact with and use my Bank Reset control without me asking it to do so and without requesting confirmation. I noticed the attempted action and stopped it before it completed.
This was not an isolated occurrence: I have seen the Sol model try to use the reset button multiple times and have had to intervene manually each time.
The behavior is especially unexpected because, when this happened, my weekly usage limit still had more than 90% remaining and the normal scheduled reset was due later the same day. There was no apparent need for the model to touch Bank Reset at all.
Steps / context
- Use the Codex macOS app with the Sol model during a normal task.
- Do not ask the model to reset, modify, or manage any usage bank or account limit.
- The model nevertheless moves toward or attempts to activate the Bank Reset control through computer use.
- Manually stop the action before it completes.
Actual behavior
The model initiates a usage/account-state-changing action on its own, without an explicit user request or confirmation.
Expected behavior
Bank Reset should be treated as a sensitive, user-controlled action. The model should never click, activate, or attempt to activate it unless the user explicitly requests that exact action and then confirms it immediately before execution.
The model also should not infer permission merely because it encounters the button in the interface or believes a reset might help with a task.
Impact
- Risk of consuming or wasting a limited reset without the user's consent.
- Unexpected modification of the user's usage state or allocation.
- Loss of user control over an account-level action.
- Need to continuously supervise the model and interrupt it, reducing the usefulness of autonomous computer use.
- Potentially serious consequences if the user does not notice the attempted click in time.
Feedback submission issue
I also attempted to submit this through the in-product feedback dialog, but it returned “Feedback upload failed.” Because the upload did not complete, I cannot provide a valid Feedback ID for this report.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the behavior in the Codex macOS app with the Sol model during a normal task, focusing on the computer-use path around the Bank Reset control. Verify that no reset attempt occurs without an explicit request and immediate confirmation, including when the control is visible or a reset might appear useful.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- macos
- Domain
- authorization, desktop, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100