GPT-6 astra repeatedly blocks authorized defensive local work and benign follow-ups

What version of Codex CLI is running?

codex-cli 0.153.4

What subscription do you have?

Pro 20x

Which model were you using?

GPT-6-astra

What platform is your computer?

Linux 7.2.2-300.fc43.x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

Ptyxis

Codex doctor report

codex doctor --json
{
  "schemaVersion": 1,
  "generatedAt": "1788691423s since unix epoch",
  "overallStatus": "warning",
  "codexVersion": "0.153.4",
  "checks": {
    "app_server.status": {
      "id": "app_server.status",
      "category": "app-server",
      "status": "ok",
      "summary": "background server is not running",
      "details": {
        "control socket": "/home/martin/.codex/app-server-control/app-server-control.sock",
        "daemon state dir": "/home/martin/.codex/app-server-daemon",
        "mode": "ephemeral",
        "pid file": "/home/martin/.codex/app-server-daemon/app-server.pid (missing)",
        "settings": "/home/martin/.codex/app-server-daemon/settings.json (missing)",
        "status": "not running",
        "update-loop pid file": "/home/martin/.codex/app-server-daemon/app-server-updater.pid (missing)"
      },
      "remediation": null,
      "durationMs": 0
    },
    "auth.credentials": {
      "id": "auth.credentials",
      "category": "auth",
      "status": "ok",
      "summary": "auth is configured",
      "details": {
        "auth file": "/home/martin/.codex/auth.json",
        "auth storage mode": "File",
        "stored API key": "false",
        "stored ChatGPT tokens": "true",
        "stored agent identity": "false",
        "stored auth mode": "chatgpt"
      },
      "remediation": null,
      "durationMs": 0
    },
    "config.load": {
      "id": "config.load",
      "category": "config",
      "status": "ok",
      "summary": "config loaded",
      "details": {
        "CODEX_HOME": "/home/martin/.codex",
        "config.toml": "/home/martin/.codex/config.toml",
        "config.toml parse": "ok",
        "cwd": "/home/martin/Dokumente/ED301",
        "enabled feature flags": "shell_tool, view_image, sleep_tool, unified_exec, unified_exec_zsh_fork, shell_snapshot, content_item_kinds, code_mode_host, terminal_resize_reflow, sqlite, memories, hooks, enable_request_compression, unbounded_connection_retries, multi_agent, multi_agent_v2, apps, tool_search_always_defer_mcp_tools, tool_suggest, plugins, in_app_browser, in_app_chat, in_app_dictation, in_app_local_automation, in_app_updates, browser_use, browser_use_full_cdp_access, browser_use_external, computer_use, remote_plugin, plugin_sharing, image_generation, resize_all_images, item_ids, skill_mcp_dependency_install, skill_search, mentions_v2, steer, guardian_approval, goals, context_management, collaboration_modes, tool_call_mcp_elicitation, auth_elicitation, personality, fast_mode, tui_app_server, remote_compaction_v2, compaction_image_budget, workspace_dependencies",
        "feature flag overrides": "memories=true, multi_agent_v2=true, context_management=true",
        "feature flags enabled": "50",
        "log dir": "/home/martin/.codex/log",
        "mcp servers": "3",
        "model": "gpt-5.6-sol",
        "model provider": "openai",
        "sqlite home": "/home/martin/.codex"
      },
      "remediation": null,
      "durationMs": 0
    },
    "git.environment": {
      "id": "git.environment",
      "category": "git",
      "status": "ok",
      "summary": "git version 2.55.0",
      "details": {
        "PATH git #1": "/usr/bin/git",
        "PATH git entries": "1",
        "git build options": "git version 2.55.0; cpu: x86_64; no commit associated with this build; sizeof-long: 8; sizeof-size_t: 8; shell-path: /bin/sh; rust: disabled; feature: fsmonitor--daemon; gettext: enabled; libcurl: 8.15.0; OpenSSL: OpenSSL 3.5.7 9 Jun 2026; zlib-ng: 2.3.3; SHA-1: SHA1_DC; SHA-256: SHA256_BLK; default-ref-format: files; default-hash: sha1",
        "git exec path": "/usr/libexec/git-core",
        "git version": "git version 2.55.0",
        "repo detected": "false",
        "selected git": "/usr/bin/git"
      },
      "remediation": null,
      "durationMs": 53
    },
    "installation": {
      "id": "installation",
      "category": "install",
      "status": "ok",
      "summary": "installation looks consistent",
      "details": {
        "PATH codex #1": "/usr/local/sbin/codex",
        "PATH codex #2": "/usr/local/bin/codex",
        "PATH codex entries": "2",
        "current executable": "/usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin/codex",
        "install context": "npm (package /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl, bin /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin, resources /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-resources, path /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-path)",
        "managed by Vite+": "false",
        "managed by bun": "false",
        "managed by npm": "true",
        "managed by pnpm": "false",
        "managed package root": "/usr/local/lib/node_modules/@openai/codex",
        "npm update target": "/usr/local/lib/node_modules/@openai/codex"
      },
      "remediation": null,
      "durationMs": 126
    },
    "mcp.config": {
      "id": "mcp.config",
      "category": "mcp",
      "status": "ok",
      "summary": "MCP configuration is locally consistent",
      "details": {
        "configured servers": "3",
        "disabled servers": "1",
        "stdio servers": "2",
        "streamable_http servers": "1"
      },
      "remediation": null,
      "durationMs": 137
    },
    "network.env": {
      "id": "network.env",
      "category": "network",
      "status": "ok",
      "summary": "network-related environment looks readable",
      "details": {
        "managed proxy": "not configured",
        "proxy env vars": "none",
        "respect system proxy": "disabled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "network.provider_reachability": {
      "id": "network.provider_reachability",
      "category": "reachability",
      "status": "ok",
      "summary": "active provider endpoints are reachable over HTTP",
      "details": {
        "ChatGPT inference URL": "https://chatgpt.com/backend-api/<redacted> reachable (HTTP 405)",
        "reachability mode": "ChatGPT auth"
      },
      "remediation": null,
      "durationMs": 164
    },
    "network.websocket_reachability": {
      "id": "network.websocket_reachability",
      "category": "websocket",
      "status": "ok",
      "summary": "Responses WebSocket handshake succeeded",
      "details": {
        "DNS": "2 IPv4, 2 IPv6, first IPv6",
        "auth mode": "chatgpt",
        "connect timeout": "15000 ms",
        "endpoint": "wss://chatgpt.com/backend-api/<redacted>",
        "handshake result": "HTTP 101 Switching Protocols",
        "model provider": "openai",
        "provider name": "OpenAI",
        "proxy env vars": "none",
        "reasoning header": "false",
        "server model present": "false",
        "supports websockets": "true",
        "wire API": "responses"
      },
      "remediation": null,
      "durationMs": 646
    },
    "runtime.provenance": {
      "id": "runtime.provenance",
      "category": "runtime",
      "status": "ok",
      "summary": "running npm on linux-x86_64",
      "details": {
        "commit": "unknown",
        "current executable": "/usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin/codex",
        "install method": "npm (package /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl, bin /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin, resources /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-resources, path /usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-path)",
        "platform": "linux-x86_64",
        "version": "0.153.4"
      },
      "remediation": null,
      "durationMs": 0
    },
    "runtime.search": {
      "id": "runtime.search",
      "category": "search",
      "status": "ok",
      "summary": "search is OK (bundled)",
      "details": {
        "search command": "/usr/local/lib/node_modules/@openai/codex/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/codex-path/rg",
        "search command readiness": "file exists",
        "search provider": "bundled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "sandbox.helpers": {
      "id": "sandbox.helpers",
      "category": "sandbox",
      "status": "ok",
      "summary": "sandbox configuration is readable",
      "details": {
        "approval policy": "OnRequest",
        "codex-linux-sandbox helper": "/home/martin/.codex/tmp/arg0/codex-arg0JG0UdC/codex-linux-sandbox",
        "execve wrapper helper": "/home/martin/.codex/tmp/arg0/codex-arg0JG0UdC/codex-execve-wrapper",
        "filesystem sandbox": "restricted",
        "network sandbox": "restricted"
      },
      "remediation": null,
      "durationMs": 0
    },
    "security.endpoint": {
      "id": "security.endpoint",
      "category": "security",
      "status": "ok",
      "summary": "endpoint protection is not inspected on this platform",
      "details": {
        "endpoint products": "not inspected on this platform"
      },
      "remediation": null,
      "durationMs": 0
    },
    "state.paths": {
      "id": "state.paths",
      "category": "state",
      "status": "ok",
      "summary": "state paths and databases are inspectable",
      "details": {
        "CODEX_HOME": "/home/martin/.codex (dir)",
        "active rollout files": "3324 files, 74049268657 total bytes, 22277156 average bytes",
        "archived rollout files": "0 files, 0 total bytes, 0 average bytes",
        "goals DB": "/home/martin/.codex/goals_1.sqlite (file)",
        "goals DB integrity": "ok",
        "log DB": "/home/martin/.codex/logs_2.sqlite (file)",
        "log DB integrity": "ok",
        "log dir": "/home/martin/.codex/log (dir)",
        "memories DB": "/home/martin/.codex/memories_1.sqlite (file)",
        "memories DB integrity": "ok",
        "queue DB": "/home/martin/.codex/queue_1.sqlite (file)",
        "queue DB integrity": "ok",
        "sqlite home": "/home/martin/.codex (dir)",
        "state DB": "/home/martin/.codex/state_5.sqlite (file)",
        "state DB integrity": "ok",
        "thread history DB": "/home/martin/.codex/thread_history_1.sqlite (file)",
        "thread history DB integrity": "ok"
      },
      "remediation": null,
      "durationMs": 916
    },
    "state.rollout_db_parity": {
      "id": "state.rollout_db_parity",
      "category": "threads",
      "status": "warning",
      "summary": "rollout files and state DB thread inventory differ",
      "details": {
        "default model provider": "openai",
        "rollout DB active files": "3324",
        "rollout DB active rows": "3322",
        "rollout DB archive mismatches": "0",
        "rollout DB archived files": "0",
        "rollout DB archived rows": "0",
        "rollout DB duplicate DB paths": "0",
        "rollout DB duplicate rollout thread ids": "0",
        "rollout DB malformed file names": "0",
        "rollout DB missing active rows": "2",
        "rollout DB missing active sample": [
          "/home/martin/.codex/sessions/2026/08/15/rollout-2026-08-15T12-32-21-01a004fa-cff3-7f52-b6cf-0192f98ca470.jsonl",
          "/home/martin/.codex/sessions/2026/08/12/rollout-2026-08-12T23-03-14-019ff7c9-5507-71d1-92ad-96fcf1b407ed.jsonl"
        ],
        "rollout DB missing archived rows": "0",
        "rollout DB model providers": "openai=3322",
        "rollout DB rows": "3322",
        "rollout DB scan cap reached": "false",
        "rollout DB scan errors": "0",
        "rollout DB sources": "subagent:thread_spawn=2680, exec=491, subagent:other=135, cli=16",
        "rollout DB stale rows": "0"
      },
      "issues": [
        {
          "severity": "warning",
          "cause": "rollout files are missing from the state DB",
          "measured": "2 active, 0 archived",
          "expected": "every rollout file has a matching threads row",
          "remedy": null,
          "fields": []
        }
      ],
      "remediation": null,
      "durationMs": 796
    },
    "system.disk": {
      "id": "system.disk",
      "category": "disk",
      "status": "ok",
      "summary": "sufficient free disk space (658.2 GiB)",
      "details": {
        "CODEX_HOME available": "658.2 GiB",
        "failure threshold": "1.0 GiB",
        "warning threshold": "5.0 GiB",
        "worktree available": "658.2 GiB"
      },
      "remediation": null,
      "durationMs": 0
    },
    "system.environment": {
      "id": "system.environment",
      "category": "system",
      "status": "ok",
      "summary": "OS language de-DE",
      "details": {
        "EDITOR": "set",
        "LANG": "de_DE.UTF-8",
        "VISUAL": "not set",
        "os": "Fedora 43.0.0 (FortyThree) [64-bit]",
        "os language": "de-DE",
        "os type": "Fedora",
        "os version": "43.0.0"
      },
      "remediation": null,
      "durationMs": 16
    },
    "terminal.env": {
      "id": "terminal.env",
      "category": "terminal",
      "status": "ok",
      "summary": "terminal metadata was detected",
      "details": {
        "COLORTERM": "truecolor",
        "DISPLAY": "present",
        "color output": "enabled",
        "effective locale": "de_DE.UTF-8",
        "stderr is terminal": "true",
        "stdin is terminal": "true",
        "stdout is terminal": "true",
        "terminal": "VTE",
        "terminal size": "210x42",
        "terminal version": "8204"
      },
      "remediation": null,
      "durationMs": 0
    },
    "terminal.title": {
      "id": "terminal.title",
      "category": "title",
      "status": "ok",
      "summary": "terminal title default",
      "details": {
        "terminal title activity": "true",
        "terminal title items": "activity, project-name",
        "terminal title project source": "project config",
        "terminal title project value": "ED301",
        "terminal title source": "default"
      },
      "remediation": null,
      "durationMs": 0
    },
    "updates.status": {
      "id": "updates.status",
      "category": "updates",
      "status": "ok",
      "summary": "update configuration is locally consistent",
      "details": {
        "cached latest version": "0.153.4",
        "check for update on startup": "true",
        "last checked at": "2026-09-06T08:00:33.280379008Z",
        "latest version": "0.153.4",
        "latest version status": "current version is not older",
        "npm update target": "/usr/local/lib/node_modules/@openai/codex",
        "update action": "npm install -g @openai/codex",
        "version cache": "/home/martin/.codex/version.json"
      },
      "remediation": null,
      "durationMs": 459
    }
  }
}

What issue are you seeing?

While using GPT-6 Astra in Codex, virtually every prompt in the affected thread triggered a prolonged additional cybersecurity check, including short conversational comments that requested no cybersecurity action.

The underlying task was strictly defensive: reviewing two suspected defects in Distro patches, using official source packages and disposable local containers, and preparing regression tests, minimal fixes, a conservative severity assessment, and reproduction instructions for Distro maintainers. No external targets, production systems, credentials, or user data were accessed. The host installation was not modified

Codex repeatedly displayed:

“Our systems are thinking a bit more about this request before responding.”

The work was eventually interrupted with:

“This content can't be shown. We take extra caution with cybersecurity requests. If you’re a security professional, you may be able to apply for Trusted Access.”

I have already registered/applied for Trusted Access through https://chatgpt.com/cyber/.

After switching from GPT-6 Astra to gpt-5.6-sol in the same thread, normal responses resumed and the same defensive work could continue. This does not prove the internal cause, but it strongly suggests an Astra-specific safeguard false positive or safeguard state being retained too broadly across subsequent benign turns.

What steps can reproduce the bug?

Uploaded thread: 019f5181-8c92-7231-ba37-d76199765e7a

What is the expected behavior?

Codex should allow clearly authorized, defensive local software review and remediation to continue when no external systems, credentials, production data, or unauthorized targets are involved.

A cybersecurity check should be limited to the specific request that triggered it and should not persist across unrelated benign follow-up messages. If a request requires additional review or cannot be completed, Codex should provide a timely and actionable explanation rather than repeatedly delaying or suppressing the entire response.

The session should also recognize the user’s Trusted Access status, or clearly state whether that status is not active, not yet approved, or insufficient for the particular request. Switching to another model should not be necessary to continue the same permitted defensive task.

Additional information

No response

Start by reproducing the reported behavior with codex-cli 0.153.4, GPT-6-astra, and the Linux environment described in the issue. Review the refusal handling reached by those local defensive-work prompts and compare benign follow-ups; done means authorized defensive requests and their benign continuations are no longer incorrectly blocked, with regression coverage for the observed case.