Automatic approval reviewer capacity errors are surfaced as unacceptable-risk rejections, blocking normal operations
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.4k
- PR merge metrics
- PR metrics pending
Description
What version of the Codex App are you using (From “About Codex” dialog)?
26.903.71938
What subscription do you have?
Not provided.
What platform is your computer?
macOS 26.6.2
What issue are you seeing?
On 2026-09-14 (UTC+8), intermittent repeated failures occurred during automatic approval review.
Exact error:
Automatic approval review failed: Selected model is at capacity. Please try a different model.
Outer message:
This action was rejected due to unacceptable risk.
User-authorized source changes, design operations, and even read-only queries were affected. These failures repeatedly interrupted development and release work.
What steps can reproduce the bug?
The failures were observed intermittently while attempting the user-authorized operations described above. A deterministic minimal reproduction and reproduction rate are not provided.
What is the expected behavior?
Please investigate the availability of the automatic approval reviewer service. A review that is unavailable should be distinguished from a genuine safety denial, with a recovery path that preserves safeguards.
Additional information
This is not confirmed to be a user permission or project server fault. The underlying cause has not been confirmed.
No full conversation, source code, local paths, account information, keys, or sensitive attachments are included.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the intermittent automatic approval review failure using the user-authorized operations described in the report, and compare the capacity error with the outer unacceptable-risk rejection. Done means an unavailable reviewer is distinguished from a genuine safety denial and has a recovery path that preserves safeguards.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100