macOS: Codex 26.623.31921 still has invalid signatures and restores Computer Use notify hook despite disabled feature

Summary

Codex Desktop on macOS still appears to have a signing / Gatekeeper / Computer Use regression on 26.623.31921 / build 4452.

The main app bundle and bundled Computer Use app both fail local code-signature verification. In addition, even with Computer Use disabled in config, Codex restores the SkyComputerUseClient notify hook and relaunches SkyComputerUseService.

This looks related to #28795, #28807, #28071, and #28572, but I am filing this as a current-version report because it still reproduces after updating to build 4452.

Environment

macOS: 26.5.1 (25F80)
Darwin: 25.5.0 RELEASE_ARM64_T8132 arm64
Codex Desktop: 26.623.31921
CFBundleVersion: 4452
Install path: /Applications/Codex.app
Computer Use path: ~/.codex/computer-use/Codex Computer Use.app

Current signing checks

$ codesign --verify --deep --strict --verbose=4 /Applications/Codex.app
/Applications/Codex.app: invalid signature (code or signature have been modified)
In architecture: arm64

$ spctl --assess --type execute --verbose=4 /Applications/Codex.app
/Applications/Codex.app: internal error in Code Signing subsystem

$ codesign --verify --deep --strict --verbose=4 ~/.codex/computer-use/Codex\ Computer\ Use.app
~/.codex/computer-use/Codex Computer Use.app: invalid signature (code or signature have been modified)
In architecture: arm64

Computer Use disabled, but notify hook restored

The local config had Computer Use disabled:

[features]
computer_use = false

[plugins."computer-use@openai-bundled"]
enabled = false

A temporary local mitigation also set notify to a no-op:

notify = ["/usr/bin/true"]

After the update / relaunch, Codex rewrote the notify hook back to SkyComputerUseClient, even though computer_use=false and the plugin remained disabled:

notify = ["~/.codex/computer-use/Codex Computer Use.app/Contents/SharedSupport/SkyComputerUseClient.app/Contents/MacOS/SkyComputerUseClient", "turn-ended", "--previous-notify", "[\"/usr/bin/true\"]"]

SkyComputerUseService was also observed running again while Computer Use was disabled.

Observed impact

• The main Codex app bundle still fails codesign --verify.
• The bundled Computer Use app still fails codesign --verify.
• spctl cannot assess /Applications/Codex.app and returns internal error in Code Signing subsystem.
• SkyComputerUseService relaunches even with Computer Use disabled.
• code_sign_clone under /private/var/folders/.../X/com.openai.codex.code_sign_clone grew to about 1.4G after update/startup before local cleanup.
• syspolicyd / trustd CPU only drops after disabling the CUA notify hook and stopping the helper.

Representative macOS log message:

Entitlement com.apple.security.application-groups=(
    "2DC432GLL2.com.openai.sky.CUAService"
) is ignored because of invalid application signature or incorrect provisioning profile

Expected behavior

• /Applications/Codex.app should pass codesign --verify --deep --strict.
• ~/.codex/computer-use/Codex Computer Use.app should pass codesign --verify --deep --strict.
• spctl --assess --type execute /Applications/Codex.app should succeed.
• Setting computer_use=false should prevent Computer Use helpers from launching.
• Setting computer_use=false should prevent Codex from installing or restoring a SkyComputerUseClient notify hook.
• Codex should not trigger repeated Gatekeeper / trustd / syspolicyd assessment loops or code_sign_clone growth.

Notes

This report intentionally uses normalized paths such as ~/.codex and /private/var/folders/... to avoid including machine-specific user paths. The failures above are from local commands on the affected macOS machine after updating to 26.623.31921 / build 4452.