Marc-André Bombeck dfe34386be fix(ai): read a Codex sign-in's memory only under its own account ...

Every write to the per-sign-in Codex memory checked the account digest,
but the reads did not. A credential reconnected to another ChatGPT
account therefore tried the old account's working model first, sorted
by its refusals and trusted its model list, until the first write
rebound the entry, and the vision gate kept answering from the old
account in the meantime.

The client reads (working model, refusals, model list) now take the
credential and treat an entry learned under another account as empty.
The vision gate holds no account id, so the connect routes rebind the
entry and the disconnect routes drop it, and the gate reads the entry
as its process last bound it.

2026-10-29 21:36:33 +01:00

..

device-poll

fix(ai): read a Codex sign-in's memory only under its own account

2026-10-29 21:36:33 +01:00

device-start

fix(auth): self-hoster opt-out for session-cookie Secure flag (v1.5.1)

2026-05-26 19:16:44 +02:00

disconnect

fix(ai): read a Codex sign-in's memory only under its own account

2026-10-29 21:36:33 +01:00