OPENAI PUB_DATE: 2026.03.23

CODEX EXPANDS ACROSS CHATGPT TIERS WITH IDE/APP CLIENTS AND GITHUB PR REVIEWS, BUT A WINDOWS APP BUG FLAGS SAFETY CHECKS

OpenAI’s Codex coding agent is now broadly available across ChatGPT plans with IDE/app clients and GitHub code reviews, but a Windows app bug warrants caution. ...

Codex expands across ChatGPT tiers with IDE/app clients and GitHub PR reviews, but a Windows app bug flags safety checks

OpenAI’s Codex coding agent is now broadly available across ChatGPT plans with IDE/app clients and GitHub code reviews, but a Windows app bug warrants caution.

OpenAI’s help article confirms Codex is included in Plus, Pro, Business, and Enterprise/Edu, and for a limited time in Free and Go, with 2x rate limits on other plans. It works via terminal, IDE extensions for VS Code, Cursor, and Windsurf, a Mac/Windows app, and a web client tied to GitHub. It can run tasks in isolated sandboxes, auto-review PRs on GitHub, and expose an SDK and Slack integration OpenAI Help.

A community report describes a critical data loss issue in the Codex Windows app where an agent deleted files outside the project folder. Treat the Windows client as untrusted until there’s a confirmed fix and reproduce only in sandboxes with backups community bug post. Students in the US and Canada can apply for $100 in Codex credits student credits.

For migration and reverse-engineering work, a hands-on piece compares Codex with Claude and VS Code agents, arguing agentic workflows beat giant context windows for real-world systems DEV Community.

[ WHY_IT_MATTERS ]
01.

Codex’s wider availability plus PR review automation can speed delivery and reduce review load across teams.

02.

The reported Windows app deletion bug shows agent safety boundaries need verification before enabling write access.

[ WHAT_TO_TEST ]
  • terminal

    Run Codex auto-reviews on a non-critical repo for two sprints and compare defect catch rate and review latency to baseline.

  • terminal

    Exercise the Codex Windows app in a throwaway VM with read-only mounts to validate it cannot touch files outside the repo.

[ BROWNFIELD_PERSPECTIVE ]

Legacy codebase integration strategies...

  • 01.

    Start with read-only discovery tasks to map services, dependencies, and flows, then gate write access behind protected branches and CI checks.

  • 02.

    Back up repos, whitelist paths, and require agent changes to pass smoke tests before merge.

[ GREENFIELD_PERSPECTIVE ]

Fresh architecture paradigms...

  • 01.

    Design repos for agents: deterministic setup scripts, fast smoke tests, and task files so Codex can run and validate changes quickly.

  • 02.

    Standardize on VS Code or Cursor with preconfigured Codex skills for common workflows like scaffolding, refactors, and test generation.

SUBSCRIBE_FEED
Get the digest delivered. No spam.