OpenAI's Codex team said it has rolled out changes over the past couple of weeks that cut the risk of Codex running destructive commands while it works. The effort started with an investigation into a small number of reports.
Per the team's post on GitHub, forced rm detection got stronger. It picks up literal forced rm invocations in control flow, substitutions, pipelines, traps, nested shells, and behind sudo or env wrappers.