Repository navigation
Pin Codex evidence tooling to verified 0.155.1 - #47
Merged
Merged
Conversation
Update the exact executable and protocol pins together, retaining unknown capabilities and all existing capture guards. Apply the four approved test literal updates. Triad: SHIP 2026-09-20
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The evidence tooling still pinned Codex 0.149.1, so it rejected the verified installed 0.155.1 executable before capture. Update the collector, probe, analyzer gate, executable manifest, and matrix digest together. Apply the four approved test literals: three version strings and one executable checksum; all existing assertions stay intact.
Validation: all 122 existing tests pass, and the capability-matrix check passes with all 24 cells remaining synthetic/unknown. The official 0.155.1 native binary matches the installed SHA-256, consumed protocol and identity fields were compared against the generated schemas, and a bounded initialize-only diagnostic completed with zero model turns. Triad and an independent Claude static review passed against patch
12cb18649eb89d2294244dc49bbf2c429d728550772d6c5ec127bc47acf138f5.The later isolated preflight verified read-only execution, disabled shell tools/web search/project instructions, no custom instructions or MCP servers, and disabled remote control. Upstream intentionally retains the unified-exec backend; shell-tool availability has a separate gate. However,
skills/liststill discovered host skills outside the fresh configuration directory. The preflight stopped before any model prompt, and no credentials were copied. Live qualification remains open; this change makes no capability promotion and changes no cancellation, descendant, timeout, byte-budget, or private-capture guards. It does not require a runtime release or Homebrew update.Both macOS and Linux CI jobs passed on their first attempts for the PR and merged
main(eb61385791008abe0c105f12c72f65be4735115a).