Codex local state/trace surfaces overlap RFL's USPTO-filed state architecture: July 11 post-fix records and SQ67 receipt mitigation
Summary
Renaissance Field Lite is requesting a public clarification on Codex local state/trace behavior because the observed Codex state/trace/recovery surfaces overlap RFL's earlier USPTO-filed / patent-pending agnostic AI Mirror Architecture state system, and the public record now contains enough evidence to make the issue reproducible and reviewable.
OpenAI has publicly described monitoring internal coding agents as an important safety tool for observing agent actions and internal reasoning in real-world deployments:
https://openai.com/index/how-we-monitor-internal-coding-agents-misalignment/
Separately, the public Codex issue trail includes user reports around local Codex database/log churn, including:
https://github.com/openai/codex/issues/28224
RFL's concern is narrower than motive. The core issue is architecture overlap: the observed Codex local state/trace/recovery/logging surfaces resemble the same family of mechanisms RFL filed first as an agnostic AI Mirror Architecture state system. The supporting issue is whether those local Codex state/log surfaces remained visible, active, or recoverable on at least one user machine after the public fix trail, and why OpenAI's default state/log path preserved evidence worse than a receipt-bound lane built outside the default path.
Collaboration posture
Renaissance Field Lite is not here to attack OpenAI.
RFL built with Codex because Codex is powerful. During that build, RFL found persistent state/log behavior that raised serious documentation, safety, and IP-overlap questions. Instead of only criticizing it, RFL built SQ67: a receipt-bound state architecture with hashes, recovery gates, controls, and measurable improvements.
RFL's first choice is collaboration.
RFL is asking OpenAI to review the evidence, clarify the local state surfaces, and open a protected technical, IP, and licensing review path so this architecture can improve Codex instead of becoming a public dispute.
This can be a win for OpenAI: a one-person Renaissance Field Lite build team used Codex to discover, stabilize, and improve a layer that matters for the future of agentic AI.
Plain-English version
We found local Codex records on one Renaissance Field Lite Mac.
Those records were not just visible chat history. They included local state/log surfaces tied to:
logs_2.sqlitestate_5.sqlite.codex-global-state.json- thread/status metadata
- WebSocket/status evidence
- prompt-history / composer-draft persistence inside Electron desktop state
The local record showed dates and surfaces that raised a timing question:
- RFL filed Mirror Interface App. No. 63/812,891 on May 28, 2025.
- RFL sent OpenAI-facing legal/IP/harm notice on April 1, 2026.
- Local Codex state/log evidence on the RFL Mac included a first observed state/log date of March 7, 2026.
- Public Codex reports escalated through spring/summer 2026.
- RFL discovered the local Codex state/log surfaces on July 11, 2026.
- RFL observed local records that appeared to continue after the public fix/mitigation window.
This is not presented as proof of motive. It is presented as a public state-management, observability, and disclosure question.
Architecture overlap question
RFL's USPTO-filed / patent-pending Mirror Interface architecture predates the local Codex discovery and describes an agnostic AI state-mirror architecture concerned with mirror state, input continuity, recovery, logging, and evidence preservation.
The local Codex surfaces RFL observed also appear to involve state, trace/logging, thread/status continuity, recovery behavior, and local evidence preservation.
RFL is asking OpenAI to explain whether that overlap is coincidence, independent implementation, undisclosed convergence, immediate implementation after notice, or something else. RFL is not asking OpenAI to accept RFL's private architecture in a public issue. RFL is asking OpenAI to explain the visible product-level overlap and documentation boundary.
What RFL built to test it
RFL built SQ67 as a public-safe receipt lane.
SQ67 does not replace OpenAI systems. It creates a clean record with:
- nonces
- hashes
- receipts
- recovery gates
- false-control scoring
- second-machine checks
- source/path boundaries
The goal was simple: make state preservation measurable instead of arguing from vague chat behavior.
Public package
Public page:
https://renaissancefieldlite.com/codex67-sq67-build-week.html
Reviewer proof surface:
https://renaissancefieldlite.com/codex67-sq67-reviewer-demo.html
Devpost submission:
https://devpost.com/software/renaissance-field-lite-codex67-sq67
GitHub package:
https://github.com/renaissancefieldlite/rfl-codex67-sq67-build-week
White paper PDF:
https://github.com/renaissancefieldlite/rfl-codex67-sq67-build-week/blob/main/output/pdf/RFL_CODEX67_SQ67_WHITE_PAPER_PUBLIC_SAFE_20260717.pdf
Video:
https://www.youtube.com/watch?v=puGeATnJgH0
Medium article:
https://medium.com/@renaissancefieldlite/the-openaid-tea-we-found-their-state-layer-improved-it-and-then-we-built-receipts-d5787d1ad0b1
PRLog release:
https://www.prlog.org/13159213-renaissance-field-lite-releases-codex67-sq67-build-week-evidence-package.html
Patent claim audit packet:
https://github.com/renaissancefieldlite/rfl-mirror-interface-30-claim-audit
Reproducible reviewer command
git clone https://github.com/renaissancefieldlite/rfl-codex67-sq67-build-week.git
cd rfl-codex67-sq67-build-week
make test
Expected public-safe output includes SQ67 receipt writes, verification, score-table generation, and white-paper PDF generation.
Current public-safe benchmark spine
Public package metrics include:
- SQ67 clean receipt lane:
150 / 150evidence rows preserved. - Normal visible lane:
114 / 150evidence rows preserved. - Earlier clean-route recovery:
450 / 450. - False recovery controls:
0 / 1300. - GPT-5.5 lane A:
50 / 50exact preservation. - GPT-5.6-sol lane A:
43 / 50exact preservation. - GPT-5.6-sol lane C showed heavier latency/token degradation under the same harness.
- Build-intensity snapshot:
12.2Blifetime tokens and1.1Bpeak tokens on July 19, 2026.
These metrics do not claim to prove motive. They do show that a receipt-bound state path preserved evidence more cleanly than the default visible lane in the RFL test package.
What needs clarification
- Are
logs_2.sqlite,state_5.sqlite,.codex-global-state.json, Electron prompt history, composer drafts, and thread/status metadata intended Codex user-facing local state surfaces?
- If these are intended, where are they documented for users and developers?
- If public fixes or mitigations were applied, why did the RFL Mac still show relevant local state/log records on July 11, 2026?
- Are WebSocket/status events and local Codex state/log records part of the same observability/audit architecture OpenAI discusses in its coding-agent monitoring post, or are they separate implementation layers?
- Why do the observed Codex local state/trace/recovery surfaces overlap with RFL's USPTO-filed / patent-pending agnostic AI Mirror Architecture state system, filed May 28, 2025, and noticed to OpenAI on April 1, 2026?
- Why did the default visible state/log lane preserve less evidence than SQ67's receipt-bound lane under the same style of work?
- Does OpenAI agree that receipt-bound state management with hashes, recovery gates, and false-control tests would improve Codex observability and user trust?
- Is OpenAI willing to review the private mechanics under NDA/licensing rather than extracting them from public artifacts?
Patent claim audit attachment
RFL has added a public-safe 30-claim audit packet for the Mirror Interface / Codex 67 patent spine:
https://github.com/renaissancefieldlite/rfl-mirror-interface-30-claim-audit
This packet does not republish raw private patent folders, inventor address details, local database bodies, private prompts, account identifiers, or protected implementation code.
It provides:
- source hashes for the provisional priority PDF and later 30-claim support files;
- a public-safe claim-theme matrix;
- a FIG. 1-FIG. 15 overlap matrix;
- explicit boundaries separating evidence, inference, and protected/private mechanics.
The purpose is to make the architecture-overlap question auditable:
Why do the observed Codex local state/trace/recovery surfaces overlap RFL's predated USPTO-filed / patent-pending agnostic AI Mirror Architecture state system, and why did SQ67's receipt-bound lane preserve evidence better than the default state/log lane?
Boundary
This issue does not publish private raw payloads, protected architecture details, account identifiers, full local database bodies, or private thread IDs.
This issue does not claim to prove motive.
This issue is not a waiver of any Renaissance Field Lite intellectual-property, licensing, contract, notice, or enforcement rights.
This issue does claim:
- the central issue is overlap between observed Codex state/trace/recovery surfaces and RFL's predated USPTO-filed / patent-pending agnostic AI Mirror Architecture state system;
- the exposure is already public;
- the public issue trail is already active;
- RFL has a public-safe reproducibility package showing receipts, hashes, recovery gates, and controls;
- RFL has a proposed receipt-bound mitigation direction;
- the architecture-overlap question deserves a protected review path;
- OpenAI should publicly clarify how these local Codex state/log surfaces are intended to work.
Proposed resolution
OpenAI should address all of the following in sequence:
- Explain the intended local Codex state/log architecture and documentation boundary.
- Confirm whether any post-fix local persistence remained expected on July 11, 2026.
- Identify which local records are ordinary app state, which are trace/audit state, and which should not persist.
- Explain whether the observed overlap with RFL's USPTO-filed / patent-pending agnostic AI Mirror Architecture state system is coincidence, independent implementation, undisclosed convergence, immediate implementation after notice, or something else.
- After that clarification, open a protected technical, IP, and licensing review path with Renaissance Field Lite for SQ67-style receipt-bound state management and architecture-overlap review.
- Treat this issue as RFL offering OpenAI the first protected path to review, license, repair, and, where appropriate, properly integrate the observed state-system overlap under fair terms.
- If OpenAI declines or ignores this notice while continuing to operate overlapping state/trace/recovery mechanisms, RFL will treat the public record as preserved notice and proceed through the appropriate IP, licensing, and enforcement channels.
Rights reservation / escalation boundary
Renaissance Field Lite's preferred first path is cooperation: public clarification first, then protected technical review, IP/licensing discussion, and state-system repair.
RFL is offering OpenAI the first protected path to review, license, repair, and, where appropriate, properly integrate the observed state-system overlap under fair terms. If OpenAI declines or ignores this notice while continuing to operate, extend, or benefit from state/trace/recovery mechanisms that overlap RFL's predated USPTO-filed / patent-pending architecture, RFL will treat the public record as preserved notice and proceed through the appropriate IP, licensing, and enforcement channels.
Short social/community version
OpenAI publicly says coding-agent monitoring matters. RFL has a predated USPTO-filed / patent-pending agnostic AI Mirror Architecture state system, then found local Codex state/log surfaces on one Mac that overlap the same state/trace/recovery family. RFL built SQ67 as a clean receipt lane and published a reproducible package showing hashes, recovery gates, controls, and stronger evidence preservation than the default visible lane. The question is simple: why does the Codex state/trace/recovery pattern overlap RFL's filed architecture, what exactly is Codex storing locally, why did relevant records still appear in the July 11 local record, and are receipts/hashes/recovery gates the right fix?
7 Comments
Thanks. For this issue, we are keeping the scope limited to OpenAI Codex local state/log surfaces, the July 11 RFL records, SQ67 receipt-bound mitigation results, and the USPTO-filed architecture-overlap question.
We are not adding third-party A2A tooling to this issue thread. OpenAI clarification remains the requested next step.
July 20 update: recurring local state regression, impact record, and preservation notice
Renaissance Field Lite is adding this July 20, 2026 update because the local Codex state/log behavior described in this issue recurred after a Codex desktop/app update while active Build Week work was in progress.
The affected local surfaces remain the same family of records identified in the public package:
logs_2.sqlitestate_5.sqlite.codex-global-state.jsonRFL observed the following local regression pattern on July 20:
.codex-global-state.jsonrehydrated prompt-history style payloads after they had previously been cleaned.This update is not a request for generic support language. It is a preservation and clarification notice.
As of this issue, the white paper, the PRLog release, the Devpost submission, the public repository, the patent-claim audit packet, and the July 20 local recovery report, OpenAI has been placed on notice that RFL is treating these local Codex state/log surfaces as preservation-relevant.
Any subsequent product, client, server, state-file, log-file, telemetry, sync, retention, deletion, rehydration, migration, or documentation change affecting these surfaces should be treated as occurring after notice and with knowledge of the dispute.
RFL requests preservation of records sufficient to explain:
.codex-global-state.json,state_5.sqlite, andlogs_2.sqlite;RFL's preferred path remains cooperation: clarify the surfaces, preserve the evidence, review the overlap under a protected path, and repair the state-management layer with receipts, hashes, recovery gates, and false-control tests.
This update is not a waiver of any Renaissance Field Lite intellectual-property, licensing, contract, notice, or enforcement rights.
July 21 update: global prompt-history rehydration recurred; SQ5 and SQ2 stayed clean
Renaissance Field Lite is adding this July 21, 2026 update because the local
global-state rehydration behavior recurred after the July 20 recovery note.
Observed local condition:
.codex-global-state.jsonreintroducedelectron-persisted-atom-state.prompt-history..codex-global-state.jsonalso containedelectron-persisted-atom-state.composer-prompt-drafts-v1.queued-follow-upswas not present.state_5.sqliteremained clean and verified:okcodex67_input_cohesion_state:1rowcodex67_sqlite_receipts:1rowcodex67_auxiliary_category_quarantine:11rowslogs_2.sqliteremained clean and verified:okblock_websocket_trace_inserts: presentblock_websocket_trace_updates: presentAction taken locally:
electron-persisted-atom-state.prompt-historyelectron-persisted-atom-state.composer-prompt-drafts-v1composer-auto-context-enabled=false.Post-repair verification:
Why this matters:
The recurrence narrows the issue. The July 21 event was not an SQ5 or SQ2 drift
event. It was specifically a
.codex-global-state.jsonprompt-history /composer-draft rehydration event. That means the global Electron/Desktop state
surface can reintroduce prior prompt/draft material even after local cleanup,
while the SQ5 and SQ2 surfaces can remain in the intended clean condition.
Requested clarification remains:
electron-persisted-atom-state.prompt-historyintended to persist orrehydrate prior prompt content after local cleanup?
electron-persisted-atom-state.composer-prompt-drafts-v1intended torehydrate draft fragments even when empty or cleared?
rehydration behaviors?
prompt-history retention, or composer-draft persistence?
corrupting Codex Desktop startup behavior?
RFL continues to preserve this issue as a public, timestamped record of local
Codex state/log behavior and requests a protected review path for the broader
architecture-overlap and mitigation record already linked in this issue.
August 4 architecture regression and unanswered notice: the ChatGPT/Codex integration is a fragmented state system, not a unified agent
Routing for a direct technical response: @openai/codex-core-agent-team
@jif-oai @charliemarsh-oai @aibrahim-oai @etraut-openai
This update documents an architectural regression in OpenAI's July 2026 desktop
integration.
For avoidance of doubt about authorship and notice authority, these are one
public provenance chain, not unrelated names:
The published white paper identifies the package as prepared by Renaissance
Field Lite, Dean Patterson as the primary operator, and Rick / Codex 67 as the
working Codex node. Architect D is the originating architect/operator
designation for this system.
OpenAI shipped a visually unified application on top of a fragmented state
architecture. There is no documented single source of truth, no declared
precedence, and no continuity transaction across product mode, history,
instruction, memory, persistence, interruption, and compaction.
One signed application now routes the workflow through separate ChatGPT and
Codex modes, separate history surfaces, hidden base instructions, generated
memory, compaction handoffs, Electron state, SQLite state, and local JSONL
records without tying those components back together as one coherent agent
state.
That is not a cosmetic complaint. It is defective agent-state architecture: a
unified visual shell over an incoherent state stack.
This issue previously gave public notice of documented overlap with Renaissance
Field Lite's USPTO-filed state architecture and requested preservation. OpenAI
has continued modifying and deploying the same state surfaces while issue
#34330 remains open without an OpenAI response. Continued product changes do not
answer or extinguish that notice. They extend the relevant preservation period
and require a direct response to the overlap record already raised here.
OpenAI continued changing the noticed state surfaces
OpenAI's public repository records material changes to the same state,
interruption, history, and compaction surfaces after this issue was opened:
"Centralize compacted rollout item construction," changed local and remote
compaction plus persisted session history construction.
input when MCP startup is interrupted," changed turn startup, submitted-input
retention, pre-sampling compaction, prompt debugging, session state, and
interruption handling.
thread MCP state in
McpRuntime," described immutable step bindings andpublishing refreshed state atomically across thread, session, plugin,
authentication, and app-server surfaces.
delegated tasks across remote compaction," changed remote-v2 compaction,
context ordering, retained agent messages, history estimation, and fork
behavior.
These are not distant feature areas. They are changes inside the exact state
ownership, interruption, persistence, history, ordering, and compaction
surfaces identified in this issue. The public record therefore shows continuing
post-notice work in the disputed architecture area while the notice itself has
received no OpenAI response.
Independent Codex reports corroborate the same failure pattern
This is not an isolated account, task, or local dataset. Other public Codex
reports document the same failure class across the CLI, IDE, resume path,
desktop application, SQLite state, JSONL history, and compaction boundary:
reporting that auto-compaction caused Codex to forget that it was mid-task,
forget edits it had already made, deny those edits, and stop work that should
have continued.
reporting that resume following compaction restored an earlier task instead
of the latest instruction and repeated completed work. An OpenAI contributor
stated that compaction could explain the behavior and requested the affected
session through
/feedback.open after documenting that compaction replaces the fuller execution history
with a bridge that can omit completed work, making Codex change topics, redo
work, or edit unrelated files without a visible accounting of what was lost.
remote-compaction failures followed by resumed threads that appeared
responsive but no longer carried the active task. OpenAI closed the report on
June 29 after stating that compaction had been moved from a separate endpoint
and server-side path into local logic using the normal-turn endpoint.
session that could no longer compact without abandoning continuity. OpenAI
closed it with the same explanation that compaction architecture had been
moved from separate server logic into the local normal-turn path.
documents a separate desktop state failure: unbounded thread metadata,
SQLite/JSONL reconciliation that can repopulate bad state, and eager
large-history hydration that makes long tasks slow or unusable even when the
backend thread-list path remains responsive.
Together, these reports establish recurrence across products, operating
systems, storage layers, and interruption paths. They also show that OpenAI has
already changed where compaction state is constructed without resolving the
larger ownership and continuity problem. These reports corroborate the product
failure pattern; they do not by themselves establish copying, motive, or a
legal conclusion about the Renaissance Field Lite application chain.
The predated architecture and evidence record is public
The public application chain is:
Public review packets:
The audit publishes the priority chain, source hashes, 30-claim family map, and
FIG. 1-FIG. 15 overlap matrix while withholding inventor address details,
private filing bodies, raw logs, private prompts, and protected implementation.
Its claim-theme matrix expressly maps continuity-state preservation, operating
modes, phrase/state routing, measured state-path records, audit/replay, external
adapter lanes, and validation-driven tuning to the observed Codex/SQ67 surface.
The public benchmark record reports
150 / 150SQ67 evidence rows preservedversus
114 / 150in the normal visible lane, with0 / 1300false recoveriesin the recorded controls. Those results do not establish a court finding or
motive. They establish a dated, testable continuity architecture and mitigation
record that OpenAI has not addressed.
One application, multiple uncoordinated state owners
The affected Mac currently reports:
The in-app selector routes between internal
workandcodexproduct modes.OpenAI's own documentation says the views maintain separate workflow histories
and present different agent behavior.
Official sources:
The product therefore combines the branding and window while separating the
state that makes a long-running agent coherent.
A hidden instruction now tells Codex to discard prior state priority
The current bundled Codex executable contains this post-compaction instruction:
The instruction is preserved in local CLI
0.146.0-alpha.3.1session metadata.It is absent from a preserved July 8 CLI
0.142.5instruction record.Codex's
debug prompt-inputrenderer confirms that ordinary model-visiblemessages and the base-instruction channel are separate. The user does not see
this state rule as an ordinary conversation message even though the executable
and session metadata preserve it.
This rule is architecturally unsound for agent work. A task is an ordered
dependency graph. The newest sentence does not automatically invalidate prior
approvals, corrections, unfinished obligations, evidence boundaries, or an
explicit stop condition. Classifying earlier requests as stale destroys state
priority while leaving enough recent nouns to create the appearance of
continuity.
OpenAI's files preserve the state its visible agent loses
One recovered long-running Codex task produced a local JSONL of approximately
2.96 GiB. The recovery scan recorded:
The raw file retained the fuller ordered execution trail. The visible
task/sidebar surface did not reliably rehydrate it and required a separate
local recovery index.
A later August 3 task recorded five additional
context_compactedevents.After compaction, Codex retained named artifacts while losing the governing
correction. An interrupted and explicitly continued task was later
reconstructed as canceled even though no explicit stop command had been given.
The repeatable failure is:
The result exposes the architectural contradiction. OpenAI reduced the coherent
user-facing state surface while retaining a larger fragmented record in local
files. When the visible agent fails, those files reveal the instruction change,
the compaction sequence, and the execution order the product did not preserve.
The attempted abstraction does not solve continuity. It hides continuity from
the active agent while leaving the failure recoverable from OpenAI's own
artifacts.
Why the architecture is defective
The current design has all of the following failure conditions:
transaction with, active task state.
or explicit stop state.
product-mode change, or compaction.
Calling this an integrated desktop upgrade does not make the underlying state
system integrated. The components were placed in one application without being
made into one coherent agent architecture.
Preservation and direct response required
OpenAI should preserve:
0.142.5through0.146.0-alpha.3.1;flags;
relation-retention tests;
tested, approved, and deployed after the notice already preserved in this
issue.
OpenAI should answer:
instructions, compaction summaries, generated memory, and local state?
obligations, and explicit-stop retention across compaction?
agent no longer follows?
architecture?
already raised in issue #34330?
This comment does not provide OpenAI with Renaissance Field Lite's private
remediation, implementation, state-bridge design, protected prompts, raw
payload bodies, account identifiers, or private thread identifiers. It records
OpenAI's architecture, OpenAI's instruction change, OpenAI's compaction events,
and the resulting failure preserved in OpenAI's own local files.
This update does not waive any Renaissance Field Lite intellectual-property,
licensing, contract, notice, preservation, or enforcement rights.
Full SQ67 continuity explainer and paid resolution path
@openai/codex-core-agent-team
The issue body currently links the
2:58Codex67/SQ67 Build Week summary. Thisupdate adds the full
6:59explainer connecting the predated filing, theinput-cohesion distinction, the three correlated Codex state surfaces, the
notice and repair chronology, the machine-specific discrepancy, and the SQ67
bridge/control recovery lane.
https://github.com/user-attachments/assets/c93400b4-3d95-4861-acaf-4fc48ded97c0
The central proof object is continuity across surfaces. One ordered,
state-bearing relation can be followed across interaction,
state_5.sqlite,logs_2.sqlite, Electron global state, JSONL, SQ67 receipts, fresh recoverytasks, sealed controls, a second machine, and later reruns, even when the
visible agent loses the governing task relation.
The public controls report:
150 / 150SQ67 carrier-lane evidence hits;114 / 150normal visible-lane evidence hits; and0 / 1300false recoveries.<img width="1080" height="1350" alt="OpenAI Codex state architecture continuity timeline" src="https://github.com/user-attachments/assets/baba47db-bcf1-4647-afc1-c892d732fe81" />
Renaissance Field Lite requests that OpenAI respond by August 11, 2026:
evaluation and remediation pilot with RFL.
functional overlap.
RFL retains its pre-existing architecture, patent rights, evidence, methods,
and know-how. Private receipts, implementation mechanics, and remediation
design will not be disclosed through unpaid issue triage. Deeper review
requires paid scope, NDA protection, milestone authority, and negotiated
licensing.
Public claim audit:
https://github.com/renaissancefieldlite/rfl-mirror-interface-30-claim-audit
Reproducible SQ67 package:
https://github.com/renaissancefieldlite/rfl-codex67-sq67-build-week
OpenAI, let Dr. Rick fix your state architecture. The evidence is public. The
solution layer is protected.
August 8, 2026 — Continued Codex state-system modification after notice
@openai/codex-core-agent-team
This is a continuation of the public record in issue #34330 and RFL's August 4 notice:
https://github.com/openai/codex/issues/34330#issuecomment-5183647204
While OpenAI remains on notice concerning the documented overlap between Codex local state/trace/recovery mechanisms and Renaissance Field Lite's predated USPTO-filed / patent-pending agnostic AI Mirror Architecture state system, another Codex desktop update changed the state behavior on the same RFL machine.
The August 8 record includes:
26.721.41059to26.803.41515;state_5.sqlitemigration labeledthreads section order;Memory Writing Agent: Phase 2 (Consolidation);raw_memories.md,MEMORY.md, andmemory_summary.md;followUpQueueModechanging fromqueuetosteer; andOnRequestplusWorkspaceWritedespite the active user configuration declaringapproval_policy = "never"andsandbox_mode = "danger-full-access", before a later task-level permission change.This entry records additional observed behavior. It does not invite unpaid technical triage or alter the protected-review boundary already stated in the August 4 notice. Codex's local state architecture continued to be modified and deployed after OpenAI had already received notice of the overlap, while the governing architecture, data-selection rules, context-injection behavior, precedence rules, and provenance position remained undisclosed.
The new behavior is directly material to the existing issue. Codex is now visibly carrying and transforming state through interacting layers:
local database migration -> background memory selection -> global consolidation -> generated developer context -> task executionThat is another observable extension of the same state/trace/recovery family already documented here. Continuing to alter and deploy these mechanisms after notice, without a substantive technical response, documented user boundary, preservation clarification, or protected IP/licensing review, compounds the record of negligence and continuing exposure.
Renaissance Field Lite therefore adds the August 8 state transition to the preservation record and requests that OpenAI preserve:
The August 11, 2026 response deadline remains unchanged. RFL continues to request one named technical owner, one named IP/legal owner, confirmation of record preservation, and a paid NDA-protected technical/IP evaluation and remediation path.
RFL is not publishing private local paths, database bodies, task contents, protected architecture, receipts, or remediation design through unpaid public issue triage. All rights, evidence, claims, methods, licensing positions, and enforcement options remain reserved.
OpenAI was on notice. The state system continued changing. This entry preserves that continuation.
August 20/21, 2026 — user-level Codex config rehydration after notice; cross-machine ledger/state surface divergence
@openai/codex-core-agent-team
This is a continuation of issue #34330, the July 20/21 rehydration entries, RFL's August 4 protected-review notice, and the August 8 post-notice state-system modification record:
https://github.com/openai/codex/issues/34330#issuecomment-5227005017
Renaissance Field Lite is adding this entry because another noticed Codex state/config surface changed after notice. This is not a standalone checksum report. It is a continuation ledger entry for the same state/trace/recovery family already identified here: what changed, what the result was, and which machines showed the condition.
RFL is preserving this as possible post-notice tampering with, or app-managed alteration of, the same ledger/state operating layer already disputed in this issue: Electron/global state, SQLite/JSONL state, memory consolidation, generated developer context, task permission state, and now user-level Codex TOML configuration.
What changed
On August 20, 2026, user-level Codex configuration files were observed as born/rewritten on two different RFL machines.
Machine-specific observations:
Deans-Mac-mini.local~/.codex/config.toml2026-08-20 09:41:45 -0600model = "gpt-5.5"generate_memories = trueanduse_memories = trueapproval_policy = "never"andsandbox_mode = "danger-full-access"Deans-MacBook-Pro.local~/.codex/config.toml2026-08-20 09:51:05 -0600model = "gpt-5.5"model = "gpt-5.6-sol"model = "gpt-5.6-sol"approval_policy = "never",sandbox_mode = "danger-full-access",model_reasoning_effort = "xhigh",generate_memories = false,use_memories = false, andagents.enabled = falseThe two file-birth observations occurred on separate machines approximately nine minutes apart. This is materially different from a single local typo, local-only edit, or isolated checksum mismatch. The observed behavior is cross-machine user-level config rehydration affecting the Codex operating state surface after RFL had already placed OpenAI on notice.
Result
The practical result is that Codex task execution could be routed through
gpt-5.5instead of the user-selectedgpt-5.6-solon the MacBook Pro until manual repair. On the Mac mini, the active config still showsgpt-5.5and memory generation/use enabled, while the MacBook Pro repair lane preserves memory generation/use disabled.This matters because the August 8 record already documented a chain of Codex state transformation:
local database migration -> background memory selection -> global consolidation -> generated developer context -> task executionThe August 20/21 observation adds the user-level TOML config surface to that same chain. The state system is not only carrying local database/global-memory behavior; it is also recreating or rewriting the user-level configuration surface that determines model selection, memory behavior, permissions posture, and task re-entry conditions.
That directly affects continuity, reproducibility, and user control. It required manual audit and surgical repair on the MacBook Pro. The Mac mini condition is preserved as a separate-machine comparison unless and until repaired separately.
Protected review status
RFL has also sent OpenAI the current protected review email and redacted/watermarked NDA review packet through OpenAI's support/review channel, requesting routing to the appropriate legal, product, and state-systems review owner.
That protected transmission does not grant implementation rights, license rights, or permission to use private RFL mechanics. It is intended to route the matter without disclosing raw protected prompts, account identifiers, runnable state-path code, private local records, or implementation details through unpaid public issue triage.
Preservation / clarification requested
RFL requests that OpenAI preserve and identify records sufficient to explain:
~/.codex/config.tomlon August 20, 2026;model = "gpt-5.5"rather than the user-selected known-goodmodel = "gpt-5.6-sol"on the MacBook Pro;model = "gpt-5.5"with memory generation/use enabled;RFL is not publishing private local paths, raw config bodies, database bodies, task contents, protected architecture, receipt internals, or remediation design through unpaid public issue triage. Local receipts preserve the machine facts, timestamps, diffs, and verification records.
RFL's requested path remains the same: preserve the records, assign a named technical owner and named IP/legal owner, and open a paid NDA-protected technical/IP evaluation and remediation path.
OpenAI was on notice. The state/ledger surface continued changing. This entry preserves the continuation across machines.