v26.6.39Jun 11, 2026
Codex issue shipper dispatch is gated, sandboxed, and resilient to GBrain capture failures.
Fixed
- Codex issue shipper hardening: requires the maintainer-applied
codex-approvedlabel before dispatch, bounds untrusted issue prompt text, runs Codex with a workspace-write sandbox and explicit approval policy, exits nonzero on fatal job failures, and lets dispatch continue when GBrain capture fails instead of retry-looping the issue.