Codex Security elicitation opens blank pane and falsely returns declined

What version of the Codex App are you using?

26.727.40816 (build 6067)

What subscription do you have?

ChatGPT paid workspace (exact tier not relevant to the rendering failure)

What platform is your computer?

macOS 26.5.2 (25F84), arm64

What issue are you seeing?

The Codex Security MCP elicitation pane opens as a completely blank right-side tab. No question, options, loading state, or error is rendered.

At the same time, the MCP call returns {"status":"declined"} even though the user never saw the form and did not decline it. This falsely attributes a user decision and pauses the security scan preflight.

The affected call is request_codex_security_user_input, used as the interactive fallback when the host-native input form is unavailable.

Steps to reproduce

1. Start a Codex Security Deep Scan in Codex Desktop.
2. Reach a capability preflight that requires explicit user approval for a configuration remediation.
3. Let the agent call request_codex_security_user_input with a multiple-choice remediation question.
4. Observe that a right-side tab titled Codex Security opens.
5. The entire tab body remains blank.
6. The MCP tool returns status: declined without any user interaction.
7. The chat then reports that an explicit choice is still required, but the user has no visible form to make that choice.

Expected behavior

The Codex Security tab should render the elicitation question and choices and remain pending until the user explicitly selects an option.

If the form cannot render, the tool should return an explicit rendering/transport error. It must not synthesize declined because that represents a user action that did not happen.

Actual behavior

• Blank Codex Security panel.
• No visible question or controls.
• Immediate false declined response.
• Deep Scan remains blocked in preflight until the agent falls back to plain chat.

Impact

This breaks interactive recovery for Codex Security scans and can misattribute consent decisions. It also makes the workflow appear stuck because the agent expects a choice the user cannot see.

Additional information

A screenshot was captured during reproduction. It shows the normal task chat on the left and a fully blank Codex Security tab on the right. The issue was reproduced while the scan itself remained running in preflight; no repository code or scan artifacts were changed by the failed elicitation.