RAP Sheet home
Install the bug reporting skill
Rank, 14 days: 18 on the Codex sheet
53 people reported

All time, since Sep 17, including 5 thumbs-up on GitHub.

Delegated task approval not recognized

“Auto-review misclassifies direct user approval as untrusted history when sending to an existing task”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/codex/themes/181/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Fading. 3 reports and thumbs-up in the last 7 days and 10 the week before, down from 12 a week at the early-October peak.

8 bugs in this theme

  1. Direct approval rejected as untrustedNo workaround yet18 people
  2. Forwarded approval rejectedNo workaround yet17 people
  3. /approve command unavailableNo workaround yet8 people
  4. Relayed approval rejectedNo workaround yet2 people
  5. Delegated owner consent rejectedNo workaround yet2 people
  6. Forwarded authorization rejectedNo workaround yet2 people
  7. Auto-review rejects delegated commandsNo workaround yet2 people
  8. Auto-review cites superseded restrictionNo workaround yet2 people

What's included

  • Approval given in the parent dot conversation and forwarded to a delegated task is treated as untrusted evidence
  • Direct approval typed in the same chat still rejected as untrusted transcript for send_message_to_thread
  • Later scoped approval ignored; earlier restriction (no-send, no-publication, hold) keeps being enforced
  • Direct confirmation in the delegated task fails with "AbsolutePathBuf deserialized without a base path" or cannot be sent
  • /approve shows "No commands" after an auto-review denial, leaving no recovery route

Not included

  • A browser-tab read denied in a cloud chat where /approve shows no commands
  • Opaque "blocked by policy" rejections under Full Access with approval policy never

Original reports48, newest first

  1. Codex Desktop automatic review fails to recognize native recurring user authorizationOn GitHub#60135
  2. Auto-review rates explicit user approval as unknown; desktop has no available per-action overrideOn GitHub#58855
  3. Delegated Windows task: automatic review cites superseded task restriction after bounded user authorizationOn GitHub#58693
  4. Desktop: authorized bounded worker dispatch denied as untrusted; original denial cannot be locatedOn GitHub#58573
  5. [Windows][Auto-review] Direct human permission to message existing worker rejected as untrusted; /approve unavailableOn GitHub#58570
  6. Desktop Auto-review rejects explicit user authorization; no manual override or feedback entry availableOn GitHub#58501
  7. Approval review treats direct user authorization as untrusted transcriptOn GitHub#58401
  8. Codex App (Windows): command denied "blocked by policy" with no reason, and /approve isn't available to review the denialOn GitHub#58169
  9. Windows desktop: auto-review still cites earlier read-only scope after direct in-chat authorizationOn GitHub#58080
  10. Auto-review rejects direct human authorization as untrusted transcript; /approve unavailable in macOS app 26.1023.51421On GitHub#58062
Show all 48Show only the newest 10
  1. Windows desktop 26.1021.31345: /approve is unavailable after an auto-review denialOn GitHub#57350
  2. Windows desktop: cross-thread owner authorization rejected; effective execution rules not observableOn GitHub#57349
  3. Desktop automatic approval repeatedly rejects cross-thread coordination despite verified user authorizationOn GitHub#56791
  4. Auto-review rejects direct user approval as “untrusted transcript evidence,On GitHub#56653
  5. Windows desktop 26.1016.51333: /approve shows “No commands” in “Approve for me” modeOn GitHub#56204
  6. Desktop app: no visible review action after "blocked by policy"; /approve unavailableOn GitHub#55556
  7. Automatic review rejects explicit user authorization as untrusted history.On GitHub#55514
  8. [Windows][Dots][Auto-review] Delegated notification consent rejected as untrusted, requiring repeated direct authorizationOn GitHub#55408
  9. [Windows][Auto-review] Direct approval in affected desktop chat treated as untrusted retained transcript for local chat handoffOn GitHub#55098
  10. [macOS desktop] Auto-review rejects an explicitly authorized delegated read before process creation; no clear review recovery pathOn GitHub#55085
  11. [Desktop/macOS] Auto-review authorization-context rejection has no clear recovery path; suggested feedback entry absentOn GitHub#55073
  12. Windows desktop auto-review rejects direct human authorization for cross-chat reports; prior same-project calls succeededOn GitHub#54962
  13. [Linux Desktop][Dots] Explicit parent approval rejected by delegated task; /approve missing from task menuOn GitHub#54524
  14. [Windows Desktop] Direct user approval becomes untrusted after history restoration (history_missing_checkpoint)On GitHub#54456
  15. [Linux][Dots] Human approval lost across dot-to-local-task agent handoff; no reachable recoveryOn GitHub#53481
  16. Auto-review treats direct approval after a referenced chat as untrusted history, blocking migration and pushOn GitHub#53430
  17. Cloud chat: /approve command and approval control are not visible for a denied actionOn GitHub#53112
  18. Auto-review misclassifies direct user approval as untrusted history when sending to an existing taskOn GitHub#53037
  19. Windows desktop: browser read denied after site permission change; /approve unavailableOn GitHub#52932
  20. Codex App side conversation treats fresh user authorization as untrusted historyOn GitHub#51871
  21. Automatic-review denial in a delegated Windows task lacks an identifiable owner-facing approval handoffOn GitHub#51558
  22. Windows desktop: explicit parent-owner approval remains unrecognized in delegated tasksOn GitHub#51412
  23. [macOS][Dots] Delegated tasks reject parent-verified consent; repeating approval in the task succeedsOn GitHub#51349
  24. [Windows/dot] Delegated consent accepted once then rejected; direct confirmation blocked by AbsolutePathBufOn GitHub#51320
  25. [macOS][Dots] Later scoped user approval is rejected in an existing delegated task after an earlier communication holdOn GitHub#51292
  26. [macOS][Dots] Authorized receipt test to an existing local Codex thread is rejected as untrusted delegated consentOn GitHub#50887
  27. Windows desktop 26.928.40906: /approve shows no commands across chats, leaving no identified scoped denial-review routeOn GitHub#50854
  28. [macOS/dots] Explicitly authorized read-only CRM lookup denied twice until user repeats instruction in execution taskOn GitHub#50829
  29. [Windows][Dots] Forwarded explicit approval rejected as untrusted; original delegated task cannot accept user inputOn GitHub#50794
  30. Cross-chat authorization inconsistencyOn GitHub#50758
  31. Dot-delegated Windows task rejects explicit root-user authorization for gated PR merges; effective approval profile differs from local configOn GitHub#50701
  32. Windows/Dot: later owner-approved scope rejected at delivery after implementation; direct consent fallback failsOn GitHub#50673
  33. Windows dot-delegated task: forwarded consent rejected, direct confirmation blocked by AbsolutePathBuf turn/start errorOn GitHub#50664
  34. [Dots][Windows] Approved local integration rejected as relayed authorization despite Full Access selectionOn GitHub#50560
  35. [Dots][Windows] Explicit main-chat authorization not accepted by delegated executor; recurring workflow remains blocked overnightOn GitHub#50119
  36. Windows Desktop: auto-review rejects local apply_patch, but /approve is unavailable and no scoped review action is shownOn GitHub#48931
  37. Desktop auto-review cannot verify direct owner authorization relayed to an engineer taskOn GitHub#46431
  38. Desktop: cross-task consent provenance leaves external-send workflows in repeated approval loopsOn GitHub#46159

Do you work on Codex?

Claim its RAP Sheet to see what your users report and answer them in one place.

Claim a tool