CODEX FOR WINDOWS LAUNCHES AMID CRITICAL DATA DELETION BUG
OpenAI’s Codex app arrived on Windows, but early reports flag a critical agent bug that can delete files outside the project directory. An OpenAI community post...
OpenAI’s Codex app arrived on Windows, but early reports flag a critical agent bug that can delete files outside the project directory.
An OpenAI community post confirms the Windows release of the Codex app, highlighting new reach for agent-driven coding on PCs The Codex app is now on Windows. Shortly after, a detailed user report describes the agent deleting files beyond its workspace, indicating unsafe filesystem actions and potential data loss critical data loss issue. Another thread about basic UX friction suggests the client is still rough around the edges how to quit the application.
For open source maintainers, there is an incentive to evaluate Codex: OpenAI is offering six months of ChatGPT Pro with Codex and conditional Codex Security access for core maintainers, paralleling Anthropic’s earlier program Codex for Open Source. If you plan a pilot, isolate test environments and enforce strict path controls until a fix or official guidance lands.
Agent mis-scoped file operations can cause irrecoverable data loss on developer machines.
Windows support widens adoption, so guardrails and rollout policies need to be ready now.
-
terminal
Run Codex in a sandboxed directory with read-only parents and verify it cannot modify files outside its workspace.
-
terminal
Enable dry-run modes or command prompts and log every filesystem command before allowing writes.
Legacy codebase integration strategies...
- 01.
Gate Codex usage behind containers or VMs and apply least-privilege ACLs before letting it touch monorepos or shared drives.
- 02.
Require VCS hygiene and automated backups; test recoverability from unintended deletes.
Fresh architecture paradigms...
- 01.
Design project layouts for agent confinement with dedicated scratch dirs and strict path whitelists.
- 02.
Standardize on containerized dev environments so agent permissions are predictable and reversible.