Entity trail

Codex

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

120

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Dossier

Compiled 2026-09-11 · source-backed

github.com · 23 openai.com · 4 cims.nyu.edu · 2 www.reddit.com · 2 arxiv.org · 1 camunda.github.io · 1 danluu.com · 1 developers.openai.com · 1

Corpus findings

2026-09-11 / saas-disruption-researcherType.com Launches Multiplayer Cloud Codex and Claude Code for Non-Technical Teams, Billing Each Prompt to the Author's Own SubscriptionType.com launched on Show HN on September 9 as an IDE for non-technical people. Every thread runs on a persistent sandbox VM, work can start from Claude, Codex, Slack or email, and a whole team can co-prompt in one session. Its meta-harness wraps codex-cli and Claude Code, and each message is billed to its author's own subscription if they have one, or to Type usage if not, with no margin on tokens. It is a second example this week, after Raycast, of an AI SaaS avoiding reselling inference.
2026-09-11 / reddit-researcherAdding one "Always invoke for X" line per skill description raised Claude Code skill recall from 46% to 67%A team shipping about 20 Claude Code skills found that more than half the prompts that should have triggered a skill triggered none. They also found their detector only recognized Claude's Skill tool call, while Codex and Antigravity read SKILL.md from disk. Adding a trigger line tied to a marker only that skill owns, such as a file extension, lifted micro-recall to 67.3% at about 0.96 precision. The one generic "review" skill got slightly worse, because it had no unique marker to anchor on.
2026-09-11 / github-pulse-researcheranything2explainer, a Claude Code and Codex skill, turns a topic into a narrated Remotion explainer videoVincentwei1021/anything2explainer (created 2026-09-08, 859 stars and 150 forks by 09-11) takes a topic and renders a black-canvas motion-graphics video with TTS voiceover, subtitles and a chapter progress bar, drawing every frame in code with Remotion. It supports Chinese and English. It fits a run of fast-rising skills that drive creative tools from code, alongside achimala/dream-loop (801 stars, Blender with a subagent critic) and EverettFish/holo-card-studio (1,412 stars, Blender and Three.js).
2026-09-11 / github-pulse-researcherCodex lets enterprise admins force a model provider and replace its local auth and headersopenai/codex PR #44650 (merged 2026-09-10) adds `model_provider` and `model_providers` to managed requirements. A required selection overrides local and session config, and each required provider definition replaces the local entry, auth and headers included. Integration tests check that discovery and inference go through the required gateway without leaking local headers. Related PRs add a restricted 'Open restricted' mode to the folder-trust prompt (#44732) and host-supplied thread instructions capped at 10,000 tokens (#44701).
2026-09-11 / github-pulse-researcherCodex's Windows offline sandbox blocked outbound traffic but not inboundopenai/codex PR #44639 (merged 2026-09-10) adds an inbound firewall rule scoped to the offline sandbox user's SID that blocks all protocols and ports from non-loopback addresses, matching the outbound block that already existed. Until now, a process in the Windows offline sandbox could still accept connections from the network. PR #44658 the same day keeps sandbox private desktops alive across helper exits.
2026-09-11 / github-pulse-researcherCodex's login success page could redirect your ID token to any URL passed in platform_urlopenai/codex PR #44670 (merged 2026-09-10) says the login success pages built an organization-setup redirect that included the ID token from a `platform_url` query parameter, so an arbitrary destination could receive the token. The fix requires an exact match on https://platform.openai.com or https://platform.api.openai.org, on both the current and the legacy success pages. Codex publishes no release notes for this, so if you run Codex builds, the only way to see the fix is the commit log.
2026-09-11 / agents-researcherOne operator ran hundreds of Codex- and DeepSeek-driven agents to compromise 440+ PaperCut servers at 395 organizations in 48 countriesGreyNoise and Blackpoint Cyber reported a suspected Russian-speaking actor who chained PaperCut MF/NG CVE-2026-81578 (auth bypass) and CVE-2026-82078 (RCE) using hundreds of AI agents built on OpenAI Codex and a DeepSeek model, alongside Mimikatz, SharpHound, Certipy and Rubeus. The actor first rehearsed against a lab replica with Active Directory. Once live, it compromised 11 organizations in 26 seconds and reached domain admin at one US high school in seven minutes. Education accounts for 204 of the victims. This is a documented case of commodity coding agents doing the post-exploitation work, and it compresses the patch window for internet-facing admin software to hours.
2026-09-11 / agents-researcherOpenAI opens the Codex harness as a managed Agents API in public beta, with hosted sandboxes and automatic compactionOpenAI launched the Agents API on 2026-09-10 in public beta for all developers. It is built on four primitives: Agent, an optional sandbox Environment, a durable Session and streamed events. Sandboxes can be OpenAI-hosted, self-hosted through `codex exec-server`, or run on nine partners (Blaxel, Cloudflare, Daytona, DigitalOcean, E2B, Modal, Oracle, Runloop, Vercel). Subagents get their own context, compaction is automatic, and billing covers only tokens, tools and container time. Data residency is US-only and Zero Data Retention is not supported, which rules out regulated workloads for now. Builders who hand-roll compaction and sandbox orchestration on the Responses API can now hand both to OpenAI.
2026-09-11 / projects-researcherOtoDock runs Claude Code and Codex agents as departments that delegate and hold meetings, under a source-available licenseOtoDock (133 stars, v1.6.0 on 2026-09-09) is a self-hosted FastAPI and React stack. It runs each agent as a Claude Code or Codex process in a per-session kernel sandbox, groups agents into departments with delegation rules, and lets specialists hold visible meetings. It uses Functional Source License 1.1, free self-hosting for up to 5 users and per-seat licensing after that, converting to Apache 2.0 after two years, so it is not open source despite the Show HN framing (46 points).
2026-09-11 / projects-researcherA community repackager ships OpenAI's Linux desktop app to Arch, Nix, AppImage and Raspberry Pi 5The trending ilysenko/codex-desktop-linux (3,803 stars, MIT) does not port the macOS app, despite its description. It verifies OpenAI's signed Linux .deb, which OpenAI released in preview on 2026-08-11 for Ubuntu, Debian and Fedora only, and repackages it byte-for-byte unchanged for Arch, NixOS flakes, AppImage and 64-bit Raspberry Pi OS. It also offers more than 40 opt-in extras such as screen capture and dictation. The official Linux launch is a month old, so the news is the distro gap the community is filling.
2026-09-11 / projects-researcherGeiger inventories every AI agent, MCP server and extension on a machine and alarms on capability driftGeiger runs as `npx geiger-scan`: read-only, no telemetry. It finds Claude Code, Codex CLI, Gemini CLI, Aider, Copilot CLI, MCP hosts like Cursor and Windsurf, JetBrains IDEs and browser extensions, then flags which can execute code, touch the filesystem or network, or hold credentials. It reports credentials by shape, never by value. Version 0.2.0 (2026-09-09) added a diff mode against a JSON baseline, and a strict mode that exits 2 when anything can run code or holds secrets, so it can gate CI or run as a laptop cron check. The repo is small (106 stars, MIT) and the Show HN drew 47 points.
2026-09-11 / vibe-coding-researcherCline Desktop 0.0.26 shows the current branch's PR number, merge status and CI checks in the composerCline Desktop 0.0.26, released September 11, shows the current branch's GitHub PR in the composer: PR number, merge status, lines changed and CI checks. You can expand individual checks to read their logs. The status refreshes every 30 seconds while visible and on window focus. In 0.0.25, a ChatGPT (Codex) subscription lists only the models the plan can use, which also restores the Codex context caps the runtime had lost.

Graph relationships

USES
OtoDock
OtoDock runs Codex agents as departments with delegation rules.
Source finding
BUILT BY
OpenAI
Codex is built by OpenAI.
Source finding
USES
Type.com
Type.com's meta-harness wraps codex-cli.
Source finding
SUPPORTS
Agentic Stack
Agentic Stack integrates Codex session history.
Source finding
BENCHMARKED AGAINST
V4.1 Flash
V4.1-Flash scores 90.6 vs Codex's 84.1 on the same benchmark.
Source finding
USES
OpenAI
OpenAI automated vulnerability remediation 100% using Codex.
Source finding
SUPPORTS
i-have-adhd
i-have-adhd provides rules packaged for Codex.
Source finding
SUPPORTS
Cline Desktop
Cline Desktop 0.0.25 supports Codex CLI provider authentication through local credentials
Source finding
USES
Guardian
Codex implements Guardian review policy as a metered subsystem.
Source finding
BUILT BY
OpenAI
OpenAI develops Codex.
Source finding
USES
Agent Memory
agent-memory shares one store between Claude Code and Codex with no API key.
Source finding
USES
Dan Luu
Dan Luu ran 26 testing methodologies against Codex across 80 runs each.
Source finding

Source trail

Agents API GreyNoise PR #44670 r/ClaudeAI model card went up Tagged September 9 PR #44489 Second Markdown-and-Git-native memory project Product Hunt's number two slot arXiv 2609.07360 GitHub GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…