Alpha· Notable · Confirmed

Plugin marketplace source policy starts enforcing at runtime

Codex moved marketplace source-policy checks into runtime enforcement and increased an app-server time-read timeout.

  • Security
  • MCP
  • Sandbox
  • API

The main change is a trust-boundary hardening step: marketplace source rules are now checked while the system is running.

Alpha release context: 1 official tag was published that UTC day (rust-v0.143.0-alpha.29). The full comparison contains 3 commits and 14 changed files.

Evidence

Plugin marketplace source policy is enforced at runtime.Why it matters: A source that fails marketplace policy can be rejected at the runtime boundary instead of relying only on earlier admission checks.

Direct evidence · Confirmed

Supporting sources

Conflicting sources

No conflicting sources recorded.

The app-server current-time read timeout was increased.Why it matters: Time reads get more room to complete before being treated as failed in slower environments.

Direct evidence · Confirmed

Supporting sources

Conflicting sources

No conflicting sources recorded.

Availability

Availability note: these sources establish repository and CLI release activity. They do not, by themselves, prove that the same changes were live in Codex Desktop.

Availability by surface

SurfaceStatusClaim-level evidence
CLIPrerelease · Documented · General
  • claim-2026-06-28-runtime-source-policy: Prerelease · Documented · General · version 0.143.0-alpha.29 · source-release-2026-06-28
  • claim-2026-06-28-time-read-timeout: Prerelease · Documented · General · version 0.143.0-alpha.29 · source-release-2026-06-28
DesktopUnknown · Unknown · Unknown
IDEUnknownNo central-claim assertion recorded.
CloudUnknownNo central-claim assertion recorded.
MobileUnknownNo central-claim assertion recorded.