Who contributed to OpenAI on May 21, 2026?

4 developers shipped this update, including bolinfest, evawong-oai, abhinav-oai, and caseychow-oai.

What were the notable OpenAI updates?

windows-sandbox: drive write roots from resolved permissions, Wire MITM hooks into runtime enforcement, and Support compact SessionStart hooks.

OpenAI

Codex, the SDKs, and the engine behind ChatGPT

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

SANDBOX ENFORCEMENT STACK LANDS: Windows permissions now runtime-resolved across three major migrations

By RepoJournal · Filed 06:03 UTC on May 21, 2026 · About OpenAI

4 people shipped this

bolinfest @bolinfest 2 cited

evawong-oai @evawong-oai 1 cited

abhinav-oai @abhinav-oai 1 cited

caseychow-oai @caseychow-oai 1 cited

Codex shipped the final piece of its Windows sandbox permission architecture, moving from legacy enum questions to resolved runtime capability checks across setup, spawn, and enforcement layers.

The sandbox `SandboxPolicy` to `PermissionProfile` migration reached critical mass overnight with three interconnected PRs landing in sequence [1] [2] [3]. PR #22923 completes the setup/spawn helper migration, replacing questions like 'is this WorkspaceWrite?' with 'does this profile require write roots?' [1]. Meanwhile, MITM hook enforcement wired into the request path [2], enforcing hooked HTTPS hosts to require MITM, evaluating inner requests post-CONNECT, and blocking unmatched hooks. On the lifecycle side, `SessionStart` hooks now support compaction by queuing pending states alongside compact rewrites, letting durable context re-inject after conversation history replacement [3]. Plugin creator tooling gained a dedicated personal-marketplace update flow for iterating on existing local plugins [4], keeping scaffold paths intact while making the development loop explicit. Finally, `codex exec-server` now accepts `--strict-config` validation [5], closing the gap left when earlier commands got fast-fail support for misspelled keys.

Action items

→ Review Windows permission profile integration in your sandbox policies - the resolved permission model is now the standard path openai/codex [plan]
→ Test MITM hook enforcement in staging before production deployment - header mutation and blocking behavior is now active openai/codex [plan]
→ Update plugin creator workflows to use new personal-marketplace update flow for local iteration openai/codex [monitor]
→ Add `--strict-config` to exec-server startup scripts to catch config errors before server launch openai/codex [plan]

References

[1] windows-sandbox: drive write roots from resolved permissions ↗ openai/codex
[2] Wire MITM hooks into runtime enforcement ↗ openai/codex
[3] Support compact SessionStart hooks ↗ openai/codex
[4] [skills] Create a personal update flow for plugin creator ↗ openai/codex
[5] cli: add strict config to exec-server ↗ openai/codex

Quick answers

What shipped in OpenAI on May 21, 2026?: Codex shipped the final piece of its Windows sandbox permission architecture, moving from legacy enum questions to resolved runtime capability checks across setup, spawn, and enforcement layers. In total, 50 commits, 50 pull requests, and 3 releases landed.
Who contributed to OpenAI on May 21, 2026?: 4 developers shipped this update, including bolinfest, evawong-oai, abhinav-oai, and caseychow-oai.
What were the notable OpenAI updates?: windows-sandbox: drive write roots from resolved permissions, Wire MITM hooks into runtime enforcement, and Support compact SessionStart hooks.

CODEX HARDENS MCP RUNTIME STABILITY ACROSS FIVE CRITICAL FIXES

OpenAI shipped a coordinated hardening of the Model Context Protocol layer across Codex, patching race conditions in thread startup, resource access, and authority management that could leave stale configurations in production.

ai 66 shipped 1-min read

OpenAI 1 day ago

SDK RELEASES LOCK IN PROMPT CACHING AND SPEND CONTROLS

Both Node and Python clients shipped v6.49.0 and v2.48.0 overnight with admin spend limit APIs and relaxed prompt cache validation.

ai 103 shipped 1-min read

OpenAI 2 days ago

CODEX CONSOLIDATES THREAD STARTUP, NODE SDK ADDS REALTIME AND STANDARD SCHEMA SUPPORT

Codex refactored its threading and database layer for consistency while the Node SDK ships four new schema helpers and fixes audio streaming in a single release push.

ai 120 shipped 1-min read

OpenAI 3 days ago

CODEX FIXES WINDOWS EXECUTION BUGS WHILE TIGHTENING SECURITY REVIEW GATES

Codex shipped critical fixes for Windows process management and terminal navigation that were silently breaking execution sessions on Windows machines.

ai 104 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.