August 19, 2026 / Daily Edition / 1 story in this issue
Lead Story Sources +3

An Approval Must Keep Its Denials

Codex is tightening the rules beneath its approval layer: a broad remembered grant must not reopen a denied child path, an unfamiliar shell must identify itself, and a stale reviewer score should be visible as stale.

A rough paper diagram shows a workspace grant retaining a red secrets denial, a child request sent to ask again, a custom shell and inner command feeding one approval key, and a Guardian score-lag card.
Diagram Punkremembered authority is only useful when its denials and identity survive reuse.
repo openai/codex evidence
3 source signals 1 repo 3 linked commits
Evidence: 3 linked commits / August 19, 2026 / Daily Edition
Read article + evidence

Edition File

All editions ›
This edition has one lead story. Its evidence trail now lives below the article.

Recent Editions

Full history ›
Agent Atlas

How AI Agents Work

The long-form map behind the daily paper: context, tools, loops, memory, delegation, safety, interface, and trust.

Open Atlas
1 article 1 repo detected 3 source signals 10 atlas chapters