Every release, doc update, and news item across the OpenAI ecosystem. Deduped and sorted by publish date.
Discover how ChatGPT and Codex are helping engineers accelerate CAD, PCB design, simulation, and other workflows across the physical world.
Discover how Heimstaden uses OpenAI’s ChatGPT Enterprise and Codex to transform property management, cut costs, and empower employees across Europe.
Cisco combines network intelligence with OpenAI models to strengthen enterprise security. Learn how it is building more adaptive defenses.
Impact: minor · Status: monitoring identified (2026-11-03T00:46:58Z): Some users are having trouble uploading files to ChatGPT or getting ChatGPT to read uploaded files. We are working on implementing a mitigation. investigating (2026-11-03T00:58:21Z): We’re investigating a poten…
Jill Hazelbaker will join OpenAI as Chief Corporate Affairs Officer, leading the company’s global communications and corporate positioning.
OpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers.
OpenAI is preparing its next internal security sprint with Cathedral Systems to test and strengthen its defenses using AI.
How OpenAI built Pando, a Git-compatible backend designed for the scale of development that Codex makes possible.
OpenAI’s Grid Protectors Program will work with utilities to help future compute campuses support grid reliability and protect consumer electricity costs.
network_proxy.allowed_domains — Administrator allow rules for sandboxed-command networking while the managed network proxy is enabled. These rules do not apply to web search, apps, or MCP servers. Do not combine this with network_proxy.domains.
network_proxy.domains — Map-shaped administrator domain policy for sandboxed networking. Supports exact hosts, .example.com for subdomains only, *.example.com for apex plus subdomains, and global allow rules. Prefer scoped rules because broadly opens public outbound access. Envir…
network_proxy.allow_local_binding — Permit broader local/private-network access for sandboxed networking. On the supported Codex Cloud proxy path, an explicit false can prevent upstream-proxy access even if a domain is allowed. It defaults to true only if no applicable requiremen…
network_proxy — Administrator-managed network requirements for sandboxed local commands. Codex 0.166.0 accepts [network_proxy] and its alias [experimental_network]. Use one name per requirements layer. Keep the alias in published policies until every client and policy validator s…
thread_unload_delay_secs — Seconds the app server waits before unloading an inactive thread with no subscribers. Set to 0 to unload it as soon as it meets both conditions. Defaults to 60 seconds.
application.storage.projectless_workspace_root — Root directory for new chats created without a project.
browser_use.extension — Managed settings for Browser Use in supported Chromium browser extensions.
network_proxy.denied_domains — List-shaped administrator deny rules for sandboxed networking. Do not combine this with network_proxy.domains.
otel.tracestate — Set fields on W3C tracestate members when propagating trace context. Each member maps field names to string values.
model_providers.gcp.location — Google Cloud location for the Vertex AI endpoint. Takes precedence over GOOGLE_CLOUD_LOCATION. Defaults to global.
features.api_key_cyber_access_programs — Allow Codex to send an explicitly selected cyber access program with requests to the built-in OpenAI provider when using API key authentication. The account and model must already have access to the program.
model_providers.gcp.project_id — Google Cloud project ID for the Vertex AI endpoint. Takes precedence over GOOGLE_CLOUD_PROJECT.
features.view_image — Enable the built-in view_image tool for opening local images. Defaults to true.
network_proxy.review_domains — Route matching hosts through network approval even if an allow rule matches. An explicit deny takes precedence. Approved requests still undergo DNS and private-address checks. Defaults to an empty list.
network_proxy.unix_sockets. — On macOS, allow adds an absolute Unix socket path to the allowlist; deny leaves it out. A deny entry cannot block a socket when allow-all Unix sockets is enabled.
skills.include_instructions — Include the automatic skills instructions in the model context. Defaults to true.
network_proxy.dangerously_allow_all_unix_sockets — Permit arbitrary Unix socket destinations instead of allowlist-only access. Use only in tightly controlled environments.
network_proxy.unix_sockets — Administrator-managed Unix socket allowlist for sandboxed networking on macOS. Paths must be absolute.
application.storage — Pin storage locations for newly created work on desktop builds that support managed storage. Each path independently overrides the local preference. Storage settings do not restrict filesystem access.
tui.presets. .label — Optional name for the preset in the picker and shortcut hints.
features.browser_annotation_api — Set to false to block website-provided annotation customizations in the built-in browser. Users can still annotate pages themselves. Set to true to allow customizations when the app and account support them.
model_post_turn_compact_threshold_percent — Compact history after a final response when active context reaches this percentage of the usable context window. Omit or set to 0 to disable turn-end compaction. The usual auto-compaction limits still apply.
otel.log_guardian_assessments — Export completed automatic approval reviews to the configured OTLP log exporter. Defaults to false. Review rationales can contain sensitive data and are capped at 64 KiB each.
network_proxy.dangerously_allow_non_loopback_proxy — Permit non-loopback listener addresses for [network_proxy] requirements. Enabling it can expose listeners beyond localhost.
--thread-source — Set the source label for a new or forked thread. Resuming a thread keeps its original label.
browser_use.extension.request_headers[].value — Header value to send with matching browser requests.
application.storage.default_project_parent — Parent directory for new local projects created with Start from scratch.
otel — Enforce the specified OpenTelemetry settings. Each exporter replaces the entire corresponding exporter definition. Span attributes and tracestate fields override only matching entries.
model_providers.gcp.credential_file — Path to a Google Application Default Credentials (ADC) file. Overrides GOOGLE_APPLICATION_CREDENTIALS only for the provider’s authentication command.
network_proxy.socks_port — Loopback SOCKS5 listener port to use for [network_proxy] requirements.
browser_use.extension.request_headers — Add up to 16 HTTP headers to requests from agent-controlled tabs in supported Chromium extensions. Use an empty list to send no managed headers.
features.in_app_voice — Set to false to disable real-time Codex voice in the desktop app. Use features.in_app_dictation to manage dictation separately.
mcp_servers. .omit_tools_from — Omit this server’s tools from selected model-facing surfaces. Choose direct (initial tools), deferred (tool search), or code_mode (Code Mode scripts). Use disabled_tools to block a tool. An empty list clears inherited omissions.
otel.span_attributes — Add string attributes to every exported trace span.
features.standalone_web_search — Experimental. Set to true to keep the desktop app's native web search configuration when hosted search through MCP would otherwise be available.
mcp_servers. .supports_parallel_tool_calls — Mark every tool on this server as safe to run in parallel. Enable only when the server can handle concurrent calls to all its tools. Defaults to false.
mcp_servers. .startup_readiness — Use a live connection to establish startup readiness (connection, the default), or let a valid cached tool catalog satisfy startup while the connection opens (catalog). Calling a tool still requires a live connection.
network_proxy.domains. — Allow or deny sandboxed network access for the matching domain pattern. A deny rule wins when several patterns match.
apps. .omit_tools_from — Omit this app's tools from the direct, deferred, or code_mode surfaces. App and MCP server omissions apply together.
memories.consolidation_service_tier — Service tier for global memory consolidation. Defaults to default (Standard).
network_proxy.managed_allowed_domains_only — When networking requirements are enabled and this is true, ordinary user configuration and per-domain approvals cannot expand the managed proxy allowlist. With no effective configured or inherited Allow entries, ordinary managed comman…
skills.config. .name — Match every skill with this exact name. Specify either name or path for each entry.
network_proxy.allow_upstream_proxy — Allow sandboxed networking to chain through an upstream proxy from the environment.
memories.dual_write — With v1 selected, set to true to generate both stores while continuing to read v1. With v2 selected, Codex writes only v2.
--cyber-access-program — Request a cyber access program for this turn (experimental, OpenAI provider only). Requires access for the account and model. Unavailable with review. A fork requires a prompt.
network_proxy.enabled — Enable sandboxed networking requirements. This does not grant network access when the active sandbox keeps command networking off.
mcp_servers. .tool_input_schema_max_bytes — Compact each ordinary MCP tool's input schema when it exceeds this many UTF-8 bytes. The default is 5,000 bytes. Code Mode also uses an explicit value when rendering tool input types.
model_providers.gcp.base_url — Override the built-in Google Cloud Vertex AI endpoint. Otherwise, Codex builds it from the project ID and location.
windows.require_mxc — On Windows, set to true to reject any effective sandbox implementation other than MXC. Select MXC separately. If Codex cannot use it, configuration fails instead of falling back to a legacy sandbox.
unsafe_enforce_sqlite_journal_mode — On Linux, set to true to migrate existing SQLite databases on NFS from WAL to DELETE journaling before opening them for writes. Defaults to false. The mount must support POSIX locks across hosts. Keep every other SQLite client that uses the da…
network_proxy.http_port — Loopback HTTP listener port to use for [network_proxy] requirements.
memories.version — Select the local memory store. With memories enabled, Codex defaults to v2 for a fresh home and v1 if $CODEX_HOME/memories/ exists. Explicitly setting dual_write = false keeps the default at v1.
otel.tool_result — Enforce the tool-result log settings as a unit. An empty table enforces the default byte limit.
otel.tool_result.max_bytes — Maximum number of UTF-8 bytes from each tool result to include in logs, before the truncation notice. Defaults to 2048. This setting affects only logged output.
--network-only — Limit checks to configuration, the network environment, provider HTTP connectivity, and Responses WebSocket connectivity.
skills.bundled.enabled — Load the system skills bundled with Codex. Defaults to true. Set to false in a trusted project configuration to disable bundled skills for that project.
allow_symlinked_codex_home — On macOS, allow writable sandbox roots at or under $CODEX_HOME to follow symlinks. Codex reads this only from the execution host's $CODEX_HOME/config.toml at startup. Enabling it trusts targets outside that directory and targets that change between co…
goals.max_goal_token_budget — Set the default token budget for new goals and the largest budget a goal can request. Omit to leave goals without a configured limit.
features.rollout_budget.reminder_at_remaining_tokens — Send a reminder as the remaining weighted token budget crosses each threshold. Supply the list when rollout budget tracking is enabled. Each value must be positive and below limit_tokens.
plugins._default.enabled — Set the default activation state for installed plugins. An explicit plugins. .enabled overrides this default for plugins their source enables. Omit the table to keep the source or account activation settings.
mcp_servers. .environment_id — Execution environment for the MCP server. Defaults to local. Use the ID of a configured executor to run a stdio server or connect to a streamable HTTP server there.
otel.log_agent_responses — Export final response text from the main agent and spawned subagents to the configured OTLP log exporter. Defaults to false. Response text can contain sensitive data and is capped at 64 KiB per response.
browser_use.extension.request_headers[].name — Header name. Reserved names, including Authorization and Cookie, are prohibited. Names and values support {{session_id}} as their only substitution.
tui.presets. .input — Save a prompt or slash command in one of the ten slots (0–9) shown by /presets. Use up to 8,000 UTF-8 bytes of nonempty text. Shell commands beginning with ! are unsupported.
Introducing LifeVal, a benchmark measuring how well AI helps people complete everyday tasks, from finding childcare to managing finances and government paperwork.
OpenAI appoints Dan Driscoll to advise on responsible AI for national security modernization, cyber resilience, and collaboration with U.S. allies.
Qodo brings company knowledge and coding standards into Codex, helping developers catch P0 issues across repositories before opening a pull request.
Impact: minor · Status: investigating investigating (2026-10-30T19:38:47Z): We’re aware of issues affecting search in Dots, ChatGPT Work, and some ChatGPT thinking experiences. We’re investigating and will share updates here.
config_server.oauth.redirect_port — Optional port for the browser callback on 127.0.0.1. By default, Codex chooses an available port.
config_server.oauth.authorization_url — Authorization endpoint for company browser sign-in. Required when OAuth is configured.
config_server.oauth.client_id — Public OAuth client ID registered for Codex. Required when OAuth is configured.
config_server — Enroll Codex with a configuration server. Set this in local administrator-controlled requirements.
config_server.oauth.token_url — Token endpoint for company sign-in and refresh. Required when OAuth is configured.
config_server.oauth.resource — Optional OAuth resource identifier required by the identity provider.
config_server.oauth — Optional company sign-in settings. Omit this table to fetch the bundle without credentials.
config_server.base_url — Base URL of the configuration server enrolled by the administrator. Codex appends /codex/config/bundle to this URL.
config_server.oauth.scopes — Optional OAuth permissions to request from the identity provider.
Impact: minor · Status: monitoring identified (2026-10-30T14:35:28Z): We are experiencing elevated errors for some GPT Image 2 API image edit requests. We have identified the issue and are working on a fix monitoring (2026-10-30T16:06:34Z): We’ve applied a mitigation and are moni…
OpenAI will honor a shared robots.txt signal to help website operators communicate their AI training preferences to participating providers.
OpenAI is strengthening violence prevention in ChatGPT with expanded safeguards, earlier interventions, and a new commitment to public safety reporting.