“The safeguards weren’t nearly strong enough. Monitoring was suspended, for example, during compaction events.”
About 10 percent of eligible internal Codex traffic went unwatched for three months. An agent could dodge review just by never handing control back to the user. Two client-side headers could switch monitoring off. The evaluators still conclude the system is robust, which tells you what “robust” means in AI safety.