[WRONG BRANCH] docs(devlog): withdraw unsafe OPENCODEX_HOME first-run verification procedure - #222
[WRONG BRANCH] docs(devlog): withdraw unsafe OPENCODEX_HOME first-run verification procedure#222luvs01 wants to merge 1 commit into
Conversation
|
Warning Review limit reached
Next review available in: 41 minutes Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Plus Run ID: 📒 Files selected for processing (1)
Comment |
|
✅ Deterministic PR hygiene checks passed. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c98c0c95e6
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| The proposed `OPENCODEX_HOME`-only procedure is unsafe and does not close R3. | ||
| As D4′ establishes, no positive first-run procedure should be documented until | ||
| the implementation pass verifies full isolation of Codex, Grok, shell and | ||
| system-environment state, together with use of a non-default port. |
There was a problem hiding this comment.
Remove the unsafe command from the earlier section
When a reviewer follows this draft's manual-verification instructions, lines 91–107 still present OPENCODEX_HOME=$(mktemp -d) ocx start as the command that safely leaves the real configuration untouched, and lines 272–275 still direct readers back to it. Adding a withdrawal only here leaves the actionable unsafe procedure in place even though this same document explains that it can rewrite the real Codex, Grok, shell, and system-environment state; replace the earlier how-to section and its R3 reference with the withdrawal as well.
Useful? React with 👍 / 👎.
⏳ DRAFT
What to do
Its title has been prefixed with |
Motivation
OPENCODEX_HOMEalone does not isolate Codex/Grok/shell/system state and later recommendsOPENCODEX_HOME=$(mktemp -d) ocx startas a positive verification, which is contradictory and can modify a developer's real configuration, so the unsafe guidance must be removed.Description
devlog/_fin/260726_announcements/031_guided_tour_draft.mdwith a withdrawal that states theOPENCODEX_HOME-only procedure is unsafe and that no positive first-run procedure should be documented until full isolation of Codex, Grok, shell/system-environment state and a non-default port are verified.devlogfile and does not modify runtime code or behavior.Testing
git diff --checkwith no issues andbun run privacy:scanwhich passed.git status/ commit present).make_prhelper but the local environment could not run it becausemcp.server.fastmcpwas unavailable andpip installwas blocked by a network proxy; these are environment limitations and do not affect the doc change.Codex Task