Wrongly applied cybersec restriction in session

What version of Codex CLI is running?

0.144.6

What subscription do you have?

Pro

Which model were you using?

gpt 5.6 sol xhigh

What platform is your computer?

Darwin 24.4.0 arm64 arm

What terminal emulator and version are you using (if applicable)?

iterm

Codex doctor report

Codex Doctor v0.144.6 · macos-aarch64

Notes
   ⚠ rollouts     141 active files · 5.25 GB on disk
   ⚠ sandbox      filesystem restricted · network enabled
   ⚠ threads      state DB rows point at missing or unusable rollout files
─────────────────────────────────────────────────────────────

Environment
  ✓ system       en-MX
      os                       Mac OS 15.4.0 [64-bit]
      OS language              en-MX
      LANG                     en_AU.UTF-8
      VISUAL                   vim
      EDITOR                   vim
      PAGER                    less
      LESS                     -F -g -i -M -R -S -w -X -z-4
  ✓ runtime      bun 
      version                  0.144.6
      install method           bun 
      commit                   unknown
      executable               ~/.bun/install/global/no…-apple-darwin/bin/codex
  ✓ install      consistent
      context                  bun 
      managed by               npm: no · bun: yes · pnpm: no · package root /Users/fullofcaffeine/.bun/install/global/node_modules/@openai/codex
      PATH entries (3)         ~/.bun/bin/codex
                               ~/.bun/bin/codex
                               ~/.nvm/versions/node/v20.19.3/bin/codex
  ✓ search       file exists (bundled, 
      search command           ~/.bun/install/global/no…le-darwin/codex-path/rg
      search provider          bundled
      search command readiness file exists
  ✓ git          git version 2.40.1
      selected git             /opt/homebrew/bin/git
      version                  git version 2.40.1
      exec path                /opt/homebrew/Cellar/git/2.40.1/libexec/git-core
      repo detected            true
      repo root                <redacted>
      .git entry               directory
      branch                   main
      PATH entries (2)         /opt/homebrew/bin/git
                               /usr/bin/git
  ✓ terminal     iTerm2 3.6.6
      terminal                 iTerm2
      TERM_PROGRAM             iTerm.app
      terminal version         3.6.6
      stdin is terminal        true
      stdout is terminal       true
      stderr is terminal       true
      terminal size            214x49
      color output             enabled
      COLORTERM                truecolor
      COLORFGBG                7;0
      TERMINFO_DIRS entry      /Applications/iTerm.app/…ents/Resources/terminfo (dir)
      TERMINFO_DIRS entry      /usr/share/terminfo (dir)
      effective locale         en_AU.UTF-8
  ✓ title        default · project <redacted>
      title source             default
      title items              activity, project-name
      activity item            true
      project source           git repo root
      project value            <redacted>
  ✓ state        databases healthy
      CODEX_HOME               ~/.codex (dir)
      log dir                  ~/.codex/log (dir)
      sqlite home              ~/.codex (dir)
      state DB                 ~/.codex/state_5.sqlite (file) · integrity ok
      log DB                   ~/.codex/logs_2.sqlite (file) · integrity ok
      goals DB                 ~/.codex/goals_1.sqlite (file) · integrity ok
      memories DB              ~/.codex/memories_1.sqlite (file) · integrity ok
      active rollouts          141 files · 5.25 GB (avg 38.16 MB)
      archived rollouts        0 files · 0 B (avg 0 B)
  ⚠ threads      state DB rows point at missing or unusable rollout files
      default model provider   openai
      rollout DB active files  141
      rollout DB archived files 0
      rollout DB scan errors   0
      rollout DB malformed file names 0
      rollout DB scan cap reached false
      rollout DB rows          222
      rollout DB active rows   222
      rollout DB archived rows 0
      rollout DB missing active rows 0
      rollout DB missing archived rows 0
      rollout DB stale rows    79
      rollout DB archive mismatches 0
      rollout DB duplicate rollout thread ids 0
      rollout DB duplicate DB paths 0
      rollout DB model providers openai=222
      rollout DB sources       subagent:thread_spawn=116, cli=93, exec=12, vscode=1
      rollout DB stale row sample ~/.codex/sessions/2025/1…b290-dc1f8a84d07e.jsonl
      rollout DB stale row sample ~/.codex/sessions/2025/1…ab3e-3d9e2c7e7828.jsonl
      rollout DB stale row sample ~/.codex/sessions/2025/1…bda6-1a676ad716bc.jsonl
      rollout DB stale row sample ~/.codex/sessions/2025/1…9e69-52e306a99d6c.jsonl
      rollout DB stale row sample ~/.codex/sessions/2025/1…8f6d-f2de99116d88.jsonl

Configuration
  ✓ config       loaded
      model                    gpt-5.6-sol · openai
      cwd                      <redacted>
      config.toml              ~/.codex/config.toml
      config.toml parse        ok
      MCP servers              4
      feature flags            36 enabled · 1 overridden (full list with --all)
      overrides                web_search_request
      legacy alias             web_search -> web_search_request
  ✓ auth         auth is configured
      auth storage mode        File
      auth file                ~/.codex/auth.json
      stored auth mode         chatgpt
      stored API key           false
      stored ChatGPT tokens    true
      stored agent identity    false
  ✓ mcp          4 server (4 stdio) · 1 disabled
      configured servers       4
      disabled servers         1
      stdio servers            4
  ✓ sandbox      restricted fs + enabled network · approval OnRequest
      approval policy          OnRequest
      filesystem sandbox       restricted
      network sandbox          enabled
      linux helper             none
      execve wrapper helper    ~/.codex/tmp/arg0/codex-…Ew/codex-execve-wrapper

Updates
  ✓ updates      update configuration is locally consistent
      startup update check     true
      update action            bun install -g @openai/codex
      version cache            ~/.codex/version.json
      cached latest version    0.144.6
      last checked at          2026-07-21 02:13 UTC
      latest version           0.144.6
      latest version status    current version is not older

Connectivity
  ✓ network      no proxy env vars
      proxy env vars           none
  ✓ websocket    connected (HTTP 101 Switching Protocols) · 15s timeout
      model provider           openai
      provider name            OpenAI
      wire API                 responses
      supports websockets      true
      proxy env vars           none
      connect timeout          15000 ms
      auth mode                chatgpt
      endpoint                 wss://chatgpt.com/backend-api/<redacted>
      DNS                      2 IPv4, 0 IPv6, first IPv4
      handshake result         HTTP 101 Switching Protocols
      reasoning header         false
      models etag present      true
      server model present     false
  ✓ reachability active provider endpoints are reachable over HTTP
      reachability mode        ChatGPT auth
      ChatGPT base URL         https://chatgpt.com/backend-api/ reachable (HTTP 404)

Background Server
  ○ app-server   not running (ephemeral mode)
      daemon state dir         ~/.codex/app-server-daemon
      settings                 ~/.codex/app-server-daemon/settings.json (missing)
      pid file                 ~/.codex/app-server-daemon/app-server.pid (missing)
      update-loop pid file     ~/.codex/app-server-daem…/app-server-updater.pid (missing)
      control socket           ~/.codex/app-server-cont…app-server-control.sock
      status                   not running
      mode                     ephemeral

What issue are you seeing?

Got a out of the blue without any reason whatsoever:

ⓘ This content can't be shown We take extra caution with cybersecurity requests. If you’re a security professional, you may be able to apply for Trusted Access.

<img width="971" height="99" alt="Image" src="https://github.com/user-attachments/assets/ac25920b-2ade-4052-ae6c-eae74fc665b3" />

What does this even mean??

What steps can reproduce the bug?

Uploaded thread: 019f6d64-96ee-7622-bf3a-4672d6f2c4de

What is the expected behavior?

This seems like a bug on your side. There's absolutely no reason for me to get a cybersec warning/restriction in this session. Check it yourself. I'm working on a framework for Wordpress.

Additional information

_No response_