Skip to content

security: retire Codex audit jobs without API fallback - #85

Draft
Pigbibi wants to merge 3 commits into
mainfrom
security/retire-codex-audit-endpoint
Draft

Pigbibi wants to merge 3 commits into
mainfrom
security/retire-codex-audit-endpoint

Conversation

@Pigbibi

@Pigbibi Pigbibi commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Remove the legacy client.execute Codex/VPS audit implementation. If any configured endpoint is Codex (including normalized mixed-case names), fail before all SDK calls, feedback and paid API fallback. Keep deterministic routes and broker/allocation prohibitions unchanged. Existing non-Codex analysis is unchanged; no new provider or configuration is enabled.

Draft only: this changes an existing consumer runtime path, so the owner must qualify the task-service migration before adoption. No trading config, server, SSH, secret value, IAM, actual secret/variable deletion or paid request. The earlier pure dead-code removal was merged separately in #84.

Validation: 67 focused audit/consumer tests passed, including no-SDK/no-paid-fallback checks and normalized legacy provider labels. Ruff and diff whitespace passed. Final GitHub actionlint and complete test/package-build job passed. No deployment or model call.

Pigbibi and others added 3 commits October 15, 2026 02:41
Co-Authored-By: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant