Auto code review runs after PR becomes ready despite Auto review being disabled

Summary

Codex is automatically reviewing pull requests in a connected public repository even though I have not enabled automatic code review and did not explicitly request a review.

This looks very similar to the previously reported and closed issue #32224, so this may be a regression or a remaining trigger path.

Account and repository setup

• ChatGPT Pro
• Codex in ChatGPT Cloud
• GitHub repository: https://github.com/kanilmari/filterest
• Repository visibility: Public
• Personal Auto review: disabled
• Personal Exhaustive code review: disabled
• Repository Auto review: Follow personal
• Repository Trigger: Follow personal
• Repository Exhaustive: Follow personal

The Codex Analytics page also currently shows 0 PRs reviewed / 0 issues found for the selected recent period, even though the reviews below were posted to GitHub.

What happened

Two pull requests were opened / became ready for review. I did not comment @codex review, did not manually request a Codex review, and did not knowingly enable automatic review for this repository.

Nevertheless, chatgpt-codex-connector[bot] automatically submitted a Codex Review a few minutes later, which then caused GitHub notification emails to be sent to me.

Example 1

PR: https://github.com/kanilmari/filterest/pull/7

GitHub timeline:

• PR created: 2026-09-15T18:45:10Z
• ready_for_review: 2026-09-15T18:45:16Z
• Codex review submitted: 2026-09-15T18:47:44Z

Review:
https://github.com/kanilmari/filterest/pull/7#pullrequestreview-5214436775

Example 2

PR: https://github.com/kanilmari/filterest/pull/9

GitHub timeline:

• PR created: 2026-09-15T19:15:52Z
• ready_for_review: 2026-09-15T19:16:54Z
• Codex review submitted: 2026-09-15T19:21:08Z

Review:
https://github.com/kanilmari/filterest/pull/9#pullrequestreview-5214786999

Additional observation

In both cases the review followed the ready_for_review event within a few minutes. The visible PR timeline does not show an external user requesting a Codex review, and there is no @codex review comment.

The review body itself says:

Your team has set up Codex to review pull requests in this repo

but the current Codex settings page shows automatic review disabled personally and the repository set to follow those personal preferences.

Expected behavior

With personal Auto review disabled and the repository set to Follow personal, Codex should not automatically review a PR just because it is opened or becomes ready for review.

A review should only run after an explicit request, such as @codex review, or after I intentionally enable an automatic review setting.

Actual behavior

A PR becomes ready for review, then Codex automatically reviews it and GitHub sends me an email notification for the bot review, even though I did not request or enable the review.

Why this is confusing

From the user's perspective the sequence is simply:

1. A PR is opened / becomes ready.
2. A few minutes later Codex reviews it automatically.
3. GitHub sends an email about the Codex review.

There is no visible indication of which setting, installation, workspace, webhook, or trigger caused the review.

Related

• #32224 — Auto code reviews continue with Auto review disabled and consume main model usage

If useful, I can provide screenshots of the current Code Review settings and the GitHub notification emails.

Start by reproducing the ready_for_review sequence described for PRs #7 and #9, then compare the personal and repository Auto review, Trigger, and Exhaustive settings with the behavior reported in #32224. Trace which setting, installation, webhook, or trigger initiates the review; done means disabled Auto review prevents unsolicited reviews while explicit requests still work and analytics reflect actual reviews.