jif 5cada24434 Verify Codex app signatures before launch or install (#39776) ...

## What changed

- Require macOS Desktop app bundles to pass strict `codesign` verification for the Codex bundle identifier and OpenAI signing team.
- Verify downloaded apps before installation and existing apps before launch.
- Add tests that reject unsigned bundles, ad-hoc signatures, and attempts to launch an unsigned existing app.

GitOrigin-RevId: 9b23739281d8abf7fc30c5366960eb1bb07a1b7d

2026-08-20 18:41:50 +00:00

..

bin

Honor the configured SQLite home in the logs client (#35695)

2026-07-28 01:17:52 +00:00

debug_sandbox

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

desktop_app

Verify Codex app signatures before launch or install (#39776)

2026-08-20 18:41:50 +00:00

doctor

Add Windows sandbox diagnostics to codex doctor (#39290)

2026-08-18 21:56:54 +00:00

app_cmd.rs

Support ChatGPT-branded Desktop app builds (#33901)

2026-07-17 20:46:18 +00:00

cloud_config.rs

Honor cloud-managed requirements in feature listings (#38581)

2026-08-14 13:50:10 +00:00

debug_sandbox.rs

Preserve proxy settings for Windows sandbox debug sessions (#38061)

2026-08-11 19:41:23 +00:00

doctor.rs

Add Windows sandbox diagnostics to codex doctor (#39290)

2026-08-18 21:56:54 +00:00

exec_server_telemetry_tests.rs

Tie remote exec servers to their parent stdin (#35843)

2026-07-28 23:27:46 +00:00

exec_server_telemetry.rs

Tie remote exec servers to their parent stdin (#35843)

2026-07-28 23:27:46 +00:00

exit_status.rs

feat: experimental env var: CODEX_SANDBOX_NETWORK_DISABLED (#879)

2025-05-09 18:29:34 -07:00

lib.rs

cli: rename sandbox permission profile flag (#30095)

2026-06-25 11:25:19 -07:00

login.rs

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

main.rs

Warn when launching the deprecated MCP server (#39657)

2026-08-20 08:02:39 +00:00

marketplace_cmd.rs

Read plugin authentication state from AuthManager (#39087)

2026-08-17 22:26:27 +00:00

mcp_cmd.rs

Read plugin authentication state from AuthManager (#39087)

2026-08-17 22:26:27 +00:00

migrate_rollouts.rs

Report thread storage changes after rollout migration (#38579)

2026-08-14 13:40:35 +00:00

plugin_cmd.rs

Read plugin authentication state from AuthManager (#39087)

2026-08-17 22:26:27 +00:00

queue_cmd.rs

Add a command to queue messages for existing sessions (#39092)

2026-08-17 22:44:37 +00:00

remote_control_cmd.rs

Configure PSP routing through the feature system (#38056)

2026-08-11 19:16:15 +00:00

sandbox_setup.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

state_db_recovery.rs

Centralize SQLite connection configuration (#34808)

2026-07-22 18:45:47 +00:00

wsl_paths.rs

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00