Tool guide 3 · ChatGPT and Codex
How the airline's team uses ChatGPT and Codex
ChatGPT's projects and scheduled tasks for the spec, and Codex in the repository, on GitHub and in the cloud.
On this page
What ChatGPT and Codex do for a team
ChatGPT offers Chat for an answer or a short draft, and ChatGPT Work for a task with a clear outcome, such as a brief, an analysis or a file to review.1 OpenAI's Codex CLI runs Codex in a repository from your terminal, where it inspects code, edits files and runs commands.2 At the fictional airline, Priya, the product manager, keeps the rebooking assistant's case in a ChatGPT project. Arjun, the architect, writes the file Codex reads before it works, and Maya, the QA lead, teaches its reviewer the one rule that matters most.
When to reach for something else
- When you are tuning the rebooking assistant's own system prompt. OpenAI's prompt engineering guide says to use the Playground to develop and iterate on prompts.3 OpenAI's prompting guide says to treat prompts as application code, reviewed in the same pull requests as the behaviour they support.4 So the prompt that ships lives in git, beside the tests that judge it.
- When the 500 past cases need a home for their checks. OpenAI's Evals platform is deprecated: existing evals become read-only on 31 October 2026, and its dashboard and API are scheduled to shut down on 30 November 2026.5 Keep the cases and the checks in the repository, where CI runs them.
- When a cloud task would need a browser, or the code lives on GitLab. Computer and browser use, GitLab and self-hosted GitHub Enterprise Server are not yet supported in Codex Cloud environments.6
Five moves the airline's team makes with it
Each move names who makes it, in which phase, and the words they use. Copy one and change the nouns.
Move 1P1Priya, product manager
Keep the whole case in one project
Priya opens a project for the rebooking assistant and adds the PRD-lite, the interview notes and the glossary to its sources. A ChatGPT project gives its chats access to the same uploaded files, project instructions and connected sources.7
A ChatGPT project has no direct access to a folder on your computer, so you upload or connect the sources you want it to use.8 So each time the spec changes on her laptop, Priya uploads the new version and removes the old one.
Project instructionsThis project is SkyWays' rebooking assistant. Owner: Priya (product). Read the PRD in this project's sources before you answer. Take every number from the PRD: the 38-minute wait, the 240 cases a day, the $400 refund limit. Never supply a number yourself. Where the PRD is silent, write NOT DECIDED, the question, and who answers it.Move 2P1Priya, product manager
Chase the open questions every morning
A spec waits on its owners, and chasing them is a daily chore. Priya hands it to a scheduled task in ChatGPT Work. On the web a scheduled task can use uploaded files, connected tools, skills and plugins, but it cannot work directly in a folder on your computer.9
The docs advise testing a scheduled task's prompt in a regular chat first, then reviewing its first few runs.10 Priya ran the prompt by hand for a week before she scheduled it.
Scheduled task, weekdays at 08:00Read the rebooking spec in @Google Drive and the #rebooking channel in @Slack. List every spec field still marked NOT DECIDED, its owner, and the days it has been open, oldest first. Do not answer any of them. Do not post anywhere. Send the list to me.Move 3P1Arjun, architect
Write the file every Codex session reads
Codex reads AGENTS.md files before it does any work, from the repository's root down to the folder it starts in, and a nearer file overrides the ones above it.11 Arjun writes the repository's file before the first session, and reviews changes to it like code.
If a repository has AGENTS.md and no CLAUDE.md or CLAUDE.local.md, Claude Code reads AGENTS.md.12 So the airline keeps one file, AGENTS.md, and Codex and Claude Code both read it.
AGENTS.md# Rebooking service The spec is docs/spec.md. Read fields 3, 5 and 7 before you change behaviour. The $400 refund limit is one constant in refund_tool.py. Never copy it into a prompt. Every limit in the spec's field 5 is enforced in code, with a test below, at and above it. Never book on a stale fare: when the fare engine is down, the case queues for an agent. Run the tests before you call a change done.Move 4P2Maya, QA lead
Teach the reviewer the one rule that matters
For reviews on GitHub, Codex follows the
## Code Review Rulessection of the AGENTS.md file closest to the code the rules govern.13 Maya writes down the rule reviewers most often have to explain, then asks for a review on the pull request.On GitHub, Codex flags only P0 and P1 issues, so its review comments stay on high-priority risks.14 OpenAI's guide says review rules guide Codex and do not replace tests, branch protections or required approvals.15 So the test at $400.01 is still the gate.
AGENTS.md, then a comment on the pull request## Code Review Rules ### Refund limit Flag any change that types 400 as a number, or moves the refund limit into a prompt. Safe path: import REFUND_LIMIT from refund_tool.py. Flag any refund path without a test at $400 and at $400.01. @codex review for the refund path and its limitMove 5P2An engineer
Hand the evaluation run to Codex Cloud
Each Codex Cloud task gets its own isolated workspace from a published environment of repositories, dependencies and tools, and keeps working while your computer is asleep.16 The run on the 500 past cases takes a while, so the engineer sends it to the environment Arjun published.
From the terminal,
codex cloud exec --envsends a task to a cloud environment, and the CLI reference markscodex cloudexperimental.17 The push comes first. A cloud task works from its environment, and your computer's local files, running processes, browser sign-ins and VPN access are not carried over to it automatically.18Terminalgit push codex cloud exec --env <rebooking-env-id> \ 'Run the evaluation on the 500 past cases in eval/cases.csv. Report the share handled right for each kind of case, codeshare as its own group, against the bar in docs/spec.md field 6. Change no code.'
Where ChatGPT and Codex let you down
- Its instructions have a ceiling. Codex stops adding AGENTS.md files once their combined size reaches the
project_doc_max_byteslimit, 32 KiB by default.19 Keep the root file short, and put a service's rules in that service's folder. - The browser stays in ChatGPT. ChatGPT's browser works on the web and in the desktop app, and is not available in Codex CLI or the IDE extension.20 So the walk through the agent's screen happens in the desktop app, not the terminal.
- A cloud task is a workbench, not a record. A cloud task's saved state does not replace source control, and the docs say to commit the work that matters.21
Three settings decide how it behaves
1
The memory file: AGENTS.md
OpenAI's docs say to keep required team guidance in AGENTS.md or checked-in documents, and to treat memories as recall, never as the only source of a rule that must always apply.22 Local Codex memories are off by default, and kept apart from the memory ChatGPT uses on the web.23
2
Permissions: what it may do alone
The sandbox decides which files and network resources Codex's commands can reach, and the approval policy decides when it stops to ask before going further.24 On launch Codex recommends workspace write with approval on request in a folder under version control, and read-only anywhere else.25 In the default workspace-write sandbox, the .git, .agents and .codex folders, where they exist, stay read-only.26
3
Context: what each chat starts from
ChatGPT and Codex start with each skill's name and description and read its full SKILL.md only when they choose it, and with many skills installed Codex shortens the descriptions first.27 For local Codex chats, web search reads an index OpenAI maintains by default instead of fetching pages live, which lowers prompt injection risk without removing it.28 Install the skills the team uses, and no more.
The traps that catch a team
- A scheduled task does not stop to ask. In the desktop app a scheduled task runs unattended with your default sandbox settings, and without approval prompts wherever your organisation's policy allows.29 With full access, a scheduled task in the background may change files, run commands and use the network without asking.30
- An
@codexcomment on a pull request that asks for anything but a review starts a legacy cloud chat with the pull request as context, and it can push a fix to the branch when it has permission.31 Only@codex reviewasks for a review. - Code review and the GitHub and Linear integrations still run on Codex Cloud (Legacy), which OpenAI plans to deprecate.32
- The flag
--dangerously-bypass-approvals-and-sandbox, alias--yolo, removes both the sandbox and the approvals, and web search then defaults to live results.33 - OpenAI warns against setting
OPENAI_API_KEYorCODEX_API_KEYfor a whole CI job that runs the repository's code, since its build scripts, tests and dependency hooks can read it.34 - The approval policy
untrustedis retired, and a configuration that still sets it can stop Codex or ChatGPT Work from starting.35 - Prompts kept in OpenAI's dashboard have an end date. Reusable prompt objects in OpenAI's API are deprecated, and the
v1/promptsAPI is scheduled to shut down on 30 November 2026.36
Where every fact on this page comes from
Each numbered mark above points to a row here: the fact, the vendor's page it was checked against, and the date. A date turns amber once it is more than 60 days old. Prices, usage limits and model names change too often to print: read them on ChatGPT's plans and prices, the Work and Codex pricing page and the models page.
| No. | The fact | Source, and when it was checked |
|---|---|---|
| 1 | ChatGPT offers Chat for an answer or a short draft, and ChatGPT Work for a task with a clear outcome, such as a brief, an analysis or a file to review. | learn.chatgpt.com/get-started-with-work |
| 2 | OpenAI's Codex CLI runs Codex in a repository from your terminal, where it inspects code, edits files and runs commands. | learn.chatgpt.com/cli |
| 3 | OpenAI's prompt engineering guide says to use the Playground to develop and iterate on prompts. | developers.openai.com/prompt-engineering |
| 4 | OpenAI's prompting guide says to treat prompts as application code, reviewed in the same pull requests as the behaviour they support. | developers.openai.com/prompting |
| 5 | OpenAI's Evals platform is deprecated: existing evals become read-only on 31 October 2026, and its dashboard and API are scheduled to shut down on 30 November 2026. | developers.openai.com/deprecations |
| 6 | Computer and browser use, GitLab and self-hosted GitHub Enterprise Server are not yet supported in Codex Cloud environments. | learn.chatgpt.com/cloud-environments |
| 7 | A ChatGPT project gives its chats access to the same uploaded files, project instructions and connected sources. | learn.chatgpt.com/projects |
| 8 | A ChatGPT project has no direct access to a folder on your computer, so you upload or connect the sources you want it to use. | learn.chatgpt.com/projects |
| 9 | On the web a scheduled task can use uploaded files, connected tools, skills and plugins, but it cannot work directly in a folder on your computer. | learn.chatgpt.com/automations |
| 10 | The docs advise testing a scheduled task's prompt in a regular chat first, then reviewing its first few runs. | learn.chatgpt.com/automations |
| 11 | Codex reads AGENTS.md files before it does any work, from the repository's root down to the folder it starts in, and a nearer file overrides the ones above it. | learn.chatgpt.com/agents-md |
| 12 | If a repository has AGENTS.md and no CLAUDE.md or CLAUDE.local.md, Claude Code reads AGENTS.md. | code.claude.com/memory |
| 13 | For reviews on GitHub, Codex follows the ## Code Review Rules section of the AGENTS.md file closest to the code the rules govern. | learn.chatgpt.com/github |
| 14 | On GitHub, Codex flags only P0 and P1 issues, so its review comments stay on high-priority risks. | learn.chatgpt.com/github |
| 15 | OpenAI's guide says review rules guide Codex and do not replace tests, branch protections or required approvals. | learn.chatgpt.com/github |
| 16 | Each Codex Cloud task gets its own isolated workspace from a published environment of repositories, dependencies and tools, and keeps working while your computer is asleep. | learn.chatgpt.com/cloud-environments |
| 17 | From the terminal, codex cloud exec --env sends a task to a cloud environment, and the CLI reference marks codex cloud experimental. experimental | learn.chatgpt.com/developer-commands?surface=cli |
| 18 | A cloud task works from its environment, and your computer's local files, running processes, browser sign-ins and VPN access are not carried over to it automatically. | learn.chatgpt.com/modes |
| 19 | Codex stops adding AGENTS.md files once their combined size reaches the project_doc_max_bytes limit, 32 KiB by default. | learn.chatgpt.com/agents-md |
| 20 | ChatGPT's browser works on the web and in the desktop app, and is not available in Codex CLI or the IDE extension. | learn.chatgpt.com/browser |
| 21 | A cloud task's saved state does not replace source control, and the docs say to commit the work that matters. | learn.chatgpt.com/cloud-environments |
| 22 | OpenAI's docs say to keep required team guidance in AGENTS.md or checked-in documents, and to treat memories as recall, never as the only source of a rule that must always apply. | learn.chatgpt.com/memories |
| 23 | Local Codex memories are off by default, and kept apart from the memory ChatGPT uses on the web. | learn.chatgpt.com/memories |
| 24 | The sandbox decides which files and network resources Codex's commands can reach, and the approval policy decides when it stops to ask before going further. | learn.chatgpt.com/sandboxing |
| 25 | On launch Codex recommends workspace write with approval on request in a folder under version control, and read-only anywhere else. | learn.chatgpt.com/agent-approvals-security |
| 26 | In the default workspace-write sandbox, the .git, .agents and .codex folders, where they exist, stay read-only. | learn.chatgpt.com/agent-approvals-security |
| 27 | ChatGPT and Codex start with each skill's name and description and read its full SKILL.md only when they choose it, and with many skills installed Codex shortens the descriptions first. | learn.chatgpt.com/build-skills |
| 28 | For local Codex chats, web search reads an index OpenAI maintains by default instead of fetching pages live, which lowers prompt injection risk without removing it. | learn.chatgpt.com/web-search |
| 29 | In the desktop app a scheduled task runs unattended with your default sandbox settings, and without approval prompts wherever your organisation's policy allows. | learn.chatgpt.com/automations |
| 30 | With full access, a scheduled task in the background may change files, run commands and use the network without asking. | learn.chatgpt.com/automations |
| 31 | An @codex comment on a pull request that asks for anything but a review starts a legacy cloud chat with the pull request as context, and it can push a fix to the branch when it has permission. | learn.chatgpt.com/github |
| 32 | Code review and the GitHub and Linear integrations still run on Codex Cloud (Legacy), which OpenAI plans to deprecate. | learn.chatgpt.com/cloud-environments |
| 33 | The flag --dangerously-bypass-approvals-and-sandbox, alias --yolo, removes both the sandbox and the approvals, and web search then defaults to live results. | learn.chatgpt.com/agent-approvals-security |
| 34 | OpenAI warns against setting OPENAI_API_KEY or CODEX_API_KEY for a whole CI job that runs the repository's code, since its build scripts, tests and dependency hooks can read it. | learn.chatgpt.com/non-interactive-mode |
| 35 | The approval policy untrusted is retired, and a configuration that still sets it can stop Codex or ChatGPT Work from starting. | learn.chatgpt.com/agent-approvals-security |
| 36 | Reusable prompt objects in OpenAI's API are deprecated, and the v1/prompts API is scheduled to shut down on 30 November 2026. | developers.openai.com/deprecations |
The same team, with Google's tools: the fourth manual.