Codex 26.611.62324: mismatched app-group entitlements appear to trigger trustd/syspolicyd loop on macOS

Summary

After Codex Desktop was force-updated to 26.611.62324, my macOS system started hitting severe Gatekeeper / signing-related instability around Codex Computer Use.

The most visible symptoms are repeated trustd entitlement warnings, sustained syspolicyd CPU/RSS growth, and previous code_sign_clone growth. The issue appears related to mismatched app-group entitlements and embedded provisioning profiles in Codex.app and the Computer Use helpers.

This looks related to issues such as #27891, #28250, #28545, #25719, and #27536, but I am filing this as a current-version regression because the problem still reproduces on Codex 26.611.62324.

Environment

• Codex Desktop: 26.611.62324
• macOS: 27.0, build 26A5353q
• Architecture: Apple Silicon / arm64
• Codex app path: /Applications/Codex.app
• Computer Use app path: ~/.codex/computer-use/Codex Computer Use.app
• OpenAI Developer ID Team ID: 2DC432GLL2

Impact

This is not just a harmless warning. In my case it caused or contributed to:

• sustained syspolicyd and trustd activity
• syspolicyd RSS growth
• repeated Gatekeeper / policy evaluation failures
• code_sign_clone growth in /var/folders/.../X/com.openai.codex.code_sign_clone
• system-wide instability risk when the loop gets hot
• Computer Use becoming unsafe to leave running without a local mitigation

I had to install a local LaunchDaemon firebreak to keep the machine from falling back into the runaway state.

Representative Logs

trustd repeatedly reports:

Entitlement com.apple.security.application-groups=(
    "2DC432GLL2.com.openai.sky.CUAService"
) is ignored because of invalid application signature or incorrect provisioning profile

syspolicyd repeatedly reports:

failed to call driver: 0x3

Local Signing Evidence

Codex.app

/Applications/Codex.app requests this entitlement:

com.apple.application-identifier = 2DC432GLL2.com.openai.codex
com.apple.security.application-groups = [
  2DC432GLL2.com.openai.sky.CUAService
]

But /Applications/Codex.app/Contents/embedded.provisionprofile only appears to allow:

com.apple.application-identifier = 2DC432GLL2.com.openai.codex
keychain-access-groups = [
  2DC432GLL2.*
]

It does not appear to include the requested 2DC432GLL2.com.openai.sky.CUAService application group.

SkyComputerUseService

~/.codex/computer-use/Codex Computer Use.app/Contents/MacOS/SkyComputerUseService requests:

com.apple.application-identifier = 2DC432GLL2.com.openai.sky.CUAService
com.apple.security.application-groups = [
  2DC432GLL2.com.openai.sky.CUAService
]

But its embedded provisioning profile appears to allow app groups such as:

group.com.openai.sky.CUAService
2DC432GLL2.*

The requested app-group name does not match the allowed app-group name.

SkyComputerUseClient

SkyComputerUseClient requests:

com.apple.application-identifier = 2DC432GLL2.com.openai.sky.CUAService.cli
com.apple.security.application-groups = [
  2DC432GLL2.com.openai.sky.CUAService
]

But its embedded provisioning profile appears to allow:

group.com.openai.sky.Service
group.com.openai.sky.CUAService
2DC432GLL2.*

Again, the requested app-group name does not match.

Temporary Local Mitigation

As a temporary local firebreak, I installed a LaunchDaemon that checks every 30 seconds for:

• code_sign_clone growth
• excessive syspolicyd RSS

If thresholds are exceeded, it stops known Codex Computer Use helper processes, clears code_sign_clone, and restarts syspolicyd / trustd.

This is only a mitigation. It does not fix the signing/provisioning mismatch.

Expected Behavior

The official Codex.app and bundled Computer Use helpers should ship with internally consistent signing entitlements and provisioning profiles.

Launching Codex or Computer Use should not cause sustained trustd / syspolicyd loops, code_sign_clone growth, or broader Gatekeeper instability.

Request

Could the Codex team please review the app-group entitlements and embedded provisioning profiles for Codex.app, SkyComputerUseService, SkyComputerUseClient, codex_chronicle, and the bundled extension host?

The current package appears to request 2DC432GLL2.com.openai.sky.CUAService as an app group in places where the embedded profiles do not authorize that exact app group.

---

This issue was drafted with assistance from Codex.