Addendum to o3 and o4-mini system card: Codex
OpenAI
OpenAI just published a safety addendum for Codex, its cloud coding agent built on a specialized o3 model called codex-1. It matters because codex-1 was trained to write code that runs its own tests until they pass, not just spit out a guess.
Based on reporting by OpenAI — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
OpenAI has quietly dropped an addendum to its o3 and o4-mini system card, and this one is all about Codex, the company's cloud-based coding agent. The star of the show is codex-1, a purpose-built variant of o3 that OpenAI trained specifically for software engineering work rather than general reasoning.
What makes codex-1 different from a generic code-completion model is the training loop behind it. OpenAI used reinforcement learning on real coding tasks pulled from a range of environments, pushing the model to produce output that looks like something a human engineer would actually commit, complete with the kind of style and structure that tends to survive a pull request review. That's a subtle but important distinction from models that just generate plausible-looking code and stop there.
The more interesting piece is the iteration behavior. codex-1 doesn't treat a first draft as the final answer. It runs tests against its own code and keeps adjusting until those tests pass, which mirrors how a competent developer actually works rather than how most autocomplete-style coding assistants behave. OpenAI also emphasizes that the model sticks closely to whatever instructions it's given, a detail that matters a lot when you're letting an agent operate somewhat autonomously in a cloud sandbox.
This addendum format itself is worth noting. Rather than issuing a brand new system card for codex-1, OpenAI bolted this disclosure onto the existing o3 and o4-mini documentation, treating Codex as a specialized offshoot of infrastructure it already evaluated. It's a sign of how OpenAI is starting to productize its frontier models into narrower, task-specific agents instead of just shipping one general-purpose chatbot and calling it done.
My take — AI-written commentary, not fact-checked reporting
I run TLDRocket because I think most AI coverage oscillates between breathless hype and doom, and this is neither — it's OpenAI incrementally shipping a genuinely useful dev tool. That said, bolting a coding agent's safety disclosure onto an old system card as an 'addendum' feels like the bare minimum of transparency, and I'd like actual eval numbers next time, not just vibes about PR style.
Read more about this at: OpenAI