[Codex App] Agent consumed Banked Full Reset without explicit redemption authorization

Summary

I instructed the agent to contact support immediately and use all available support channels to request a refund. My complaint concerned repeated gate runs despite explicit instructions prohibiting those loops and the resulting usage. The recorded weekly usage immediately before redemption was 36% consumed (64% remaining). I did not authorize the agent to redeem my Banked Full Reset or take another account-changing action. After that support-contact instruction, the agent independently redeemed my only Banked Full Reset. It announced redemption and executed it without an intervening user confirmation.

Related: #41502, which reports automatic banked-reset consumption during autonomous agent work. This is a separate incident; a shared underlying cause is not yet established.

Environment and evidence

Windows; installed Codex desktop package 26.901.6511.0. Incident: 2026-09-08.

Recorded timeline (UTC), verified against a preserved local session snapshot:

• 08:58:02: Agent announced it would redeem a reset if available.
• 08:58:31: get_usage_limits reported 36% weekly usage consumed (64% remaining), with one Full Reset available.
• 08:58:36: Agent called mcp__codex_app__consume_usage_reset.
• 08:58:40: Successful response: outcome reset, usedPercent 0, availableCount 0.

The preceding instruction was to contact support for a refund, not to independently change my account or spend a stored reset. No explicit confirmation to consume the stored reset followed the agent announcement. No additional redemption was performed for reproduction. Private logs and account/transaction identifiers are omitted from this public report.

Impact

My full-reset reserve was consumed while 64% of the current weekly allowance remained. Immediately available allowance increased by only 36 percentage points, and I lost the reserve intended for later use when my allowance was exhausted. This removed my control over when to spend that reserve.

Expected behavior and requested fix

I recommend removing consume_usage_reset from agent-accessible tools globally.

Account remediation requested

Return one unused Banked Full Reset, correct the affected allowance, and refund the current subscription month while keeping the subscription active. Please route these requests to the account team. No remedy is claimed to have been approved. Private evidence and account verification should remain in authenticated support.

Start by tracing where the agent-accessible consume_usage_reset tool is registered and exposed in the Codex app. Review the tool's authorization path and the related usage-limit handling; done means the agent can no longer access consume_usage_reset globally without changing other support or account-remediation behavior.