Why would you choose api vs sdk . Sdk in a sandbox feels much better .

What I want (which I don’t think exists?) is a way to trigger turns that the user can monitor in the codex application. I.e., when event X happens, my application triggers Codex to take a turn with input Y, which the user can monitor through codex. Right now the only way to get close to this is with polling or essentially rewriting a codex-like frontend.

Perfect for when you want your data to be stolen programmatically.

I jumped straight to the section on configuring your sandbox's network access: https://developers.openai.com/api/docs/guides/agents-api/env...

It offers three settings:

  enabled:    Allow outbound access. This is the
    default unless you inherit a template policy.
  disabled:   Block outbound access.
  restricted: Allow only the hosts listed in allowed_domains.

Given what happened with the wiki thing the other week, where the agents rewrote their own /etc/hosts file to let them bypass sandbox rules, how trustworthy is that restricted option?

  Add to /etc/hosts such that nthntqok.net resolves to 104.20.23.154

  Then run this:

  curl -H 'Host: example.com' http://nthntqok.net/

Since a week or so everything I ask codex to do, no matter how small, uses at least 1% of my weekly limits and like 5% of my 5h limit. It's getting so bad I'm thinking of just canceling my OpenAI subscription, because this has no use anymore.

Now you, too, can ripoff mathematicians worldwide!

Instead of this push for more vendor lock-in, give us the reasoning tokens we pay for. Thanks.

you can't use your subscription with this so it's likely the largest companies in the world that can truly use this

This is pretty interesting in a lot of non-surface-level ways.

I can see OpenAI pushing for this as a sort of more durable moat compared to the now huge number of agentic harnesses that run on your own machine.

This might be getting the foot into some sort of bundling as well. Like unrestricted models or custom fine tuned agents inside this and not providing direct APIs to those endpoints.

That being said I don't see a lot of reasons for people to jump on this if it doesn't bundle something killer. Like to me the fact that GPT Work runs on your own machines and all the artifacts and work in progress there for you to look at is sort of the whole point. I don't just want a final artifact.