fix(codex): restore main policy binding after owned startup - #4085

Merged

lidge-jun merged 6 commits into

devfrom

codex/pr4025-main-policy-binding

Sep 9, 2026

Commits on Sep 9, 2026

fix(codex): restore main policy binding after owned recovery

luvs01
authored and
lidge-jun
committed
f45d619
test(codex): preserve verified policy after unknown rebind

luvs01
authored and
lidge-jun
committed
ad576de
fix(codex): reject conflicting startup token identities

luvs01
authored and
lidge-jun
committed
b6bce51
fix(codex): bound the startup policy-binding credential read
lidge-jun
committed
a79193f
fix(codex): reject conflicting account-id claims within one startup token
lidge-jun
committed
11f575e
docs(codex): name the full fenced admission set and prove the pinned startup read
lidge-jun
committed
87efd10