Tools
Codex routes MCP elicitations and tool approvals through one decision API, with model policy overriding the legacy review flag
Two Codex PRs merged within four minutes on 2026-09-07 unify approval handling: #43432 (24 files, +605/-250) lets approval extensions choose between cached approval, synchronous review, and a user prompt while core still enforces mandatory Guardian and fresh-review requirements; #43447 (12 files, +585/-129) puts MCP elicitations on the same `decide_approval` path, carrying effective policy, reviewer and synchronous-review requirement into the decision. `computer_use_review_required()` now supplies review evidence and session policy so model policy takes precedence over the legacy flag, and unsupported form and URL elicitations are preserved for user review rather than auto-decided.
Source
↳ Follow the thread