OpenAI Codex Alpha: Permissions Architecture Overhaul and Remote Control API

OpenAI

Tools official 1 src. ~1 min

OpenAI Codex shipped three alpha pre-releases on May 15 (v0.131.0-alpha.19/21/22). Active commits reveal a large-scale permissions migration replacing SandboxPolicy with PermissionProfile throughout the codebase, plus runtimeWorkspaceRoots additions to app-server thread APIs. Additional work includes remote control API updates, memory prompt injection moved to app-server extension, compact hook parity for remote compaction v2, and TUI restructuring into focused modules. Still pre-alpha; no stable release announced.

Why it matters

A fundamental security/permissions model refactor will determine how sandboxing works in the production Codex agentic coding platform. The maturing remote control and memory APIs suggest an integration surface for third-party tools is taking shape.

Importance: 2/5

Foundation-level permissions refactor in the Codex rewrite; developer-facing architecture signal

Sources