SkyWaysThe agentic manual

Tool guide 3 · ChatGPT and Codex

How the airline's team uses ChatGPT and Codex

ChatGPT's projects and scheduled tasks for the spec, and Codex in the repository, on GitHub and in the cloud.

5 moves3 settings7 traps36 dated factsLast checked

On this page
  1. What it is
  2. When not to use it
  3. Five moves
  4. Where it falls short
  5. Three settings
  6. Its traps
  7. The facts, dated

What ChatGPT and Codex do for a team

ChatGPT offers Chat for an answer or a short draft, and ChatGPT Work for a task with a clear outcome, such as a brief, an analysis or a file to review.1 OpenAI's Codex CLI runs Codex in a repository from your terminal, where it inspects code, edits files and runs commands.2 At the fictional airline, Priya, the product manager, keeps the rebooking assistant's case in a ChatGPT project. Arjun, the architect, writes the file Codex reads before it works, and Maya, the QA lead, teaches its reviewer the one rule that matters most.

When to reach for something else

  • When you are tuning the rebooking assistant's own system prompt. OpenAI's prompt engineering guide says to use the Playground to develop and iterate on prompts.3 OpenAI's prompting guide says to treat prompts as application code, reviewed in the same pull requests as the behaviour they support.4 So the prompt that ships lives in git, beside the tests that judge it.
  • When the 500 past cases need a home for their checks. OpenAI's Evals platform is deprecated: existing evals become read-only on 31 October 2026, and its dashboard and API are scheduled to shut down on 30 November 2026.5 Keep the cases and the checks in the repository, where CI runs them.
  • When a cloud task would need a browser, or the code lives on GitLab. Computer and browser use, GitLab and self-hosted GitHub Enterprise Server are not yet supported in Codex Cloud environments.6

Five moves the airline's team makes with it

Each move names who makes it, in which phase, and the words they use. Copy one and change the nouns.

  1. Move 1P1Priya, product manager

    Keep the whole case in one project

    Priya opens a project for the rebooking assistant and adds the PRD-lite, the interview notes and the glossary to its sources. A ChatGPT project gives its chats access to the same uploaded files, project instructions and connected sources.7

    A ChatGPT project has no direct access to a folder on your computer, so you upload or connect the sources you want it to use.8 So each time the spec changes on her laptop, Priya uploads the new version and removes the old one.

    Project instructions
    This project is SkyWays' rebooking assistant. Owner: Priya (product).
    Read the PRD in this project's sources before you answer.
    Take every number from the PRD: the 38-minute wait, the 240 cases a day, the $400 refund limit.
    Never supply a number yourself.
    Where the PRD is silent, write NOT DECIDED, the question, and who answers it.
  2. Move 2P1Priya, product manager

    Chase the open questions every morning

    A spec waits on its owners, and chasing them is a daily chore. Priya hands it to a scheduled task in ChatGPT Work. On the web a scheduled task can use uploaded files, connected tools, skills and plugins, but it cannot work directly in a folder on your computer.9

    The docs advise testing a scheduled task's prompt in a regular chat first, then reviewing its first few runs.10 Priya ran the prompt by hand for a week before she scheduled it.

    Scheduled task, weekdays at 08:00
    Read the rebooking spec in @Google Drive and the #rebooking channel in @Slack.
    List every spec field still marked NOT DECIDED, its owner, and the days it has been open, oldest first.
    Do not answer any of them. Do not post anywhere. Send the list to me.
  3. Move 3P1Arjun, architect

    Write the file every Codex session reads

    Codex reads AGENTS.md files before it does any work, from the repository's root down to the folder it starts in, and a nearer file overrides the ones above it.11 Arjun writes the repository's file before the first session, and reviews changes to it like code.

    If a repository has AGENTS.md and no CLAUDE.md or CLAUDE.local.md, Claude Code reads AGENTS.md.12 So the airline keeps one file, AGENTS.md, and Codex and Claude Code both read it.

    AGENTS.md
    # Rebooking service
    
    The spec is docs/spec.md. Read fields 3, 5 and 7 before you change behaviour.
    The $400 refund limit is one constant in refund_tool.py. Never copy it into a prompt.
    Every limit in the spec's field 5 is enforced in code, with a test below, at and above it.
    Never book on a stale fare: when the fare engine is down, the case queues for an agent.
    Run the tests before you call a change done.
  4. Move 4P2Maya, QA lead

    Teach the reviewer the one rule that matters

    For reviews on GitHub, Codex follows the ## Code Review Rules section of the AGENTS.md file closest to the code the rules govern.13 Maya writes down the rule reviewers most often have to explain, then asks for a review on the pull request.

    On GitHub, Codex flags only P0 and P1 issues, so its review comments stay on high-priority risks.14 OpenAI's guide says review rules guide Codex and do not replace tests, branch protections or required approvals.15 So the test at $400.01 is still the gate.

    AGENTS.md, then a comment on the pull request
    ## Code Review Rules
    
    ### Refund limit
    Flag any change that types 400 as a number, or moves the refund limit into a prompt.
    Safe path: import REFUND_LIMIT from refund_tool.py.
    Flag any refund path without a test at $400 and at $400.01.
    
    @codex review for the refund path and its limit
  5. Move 5P2An engineer

    Hand the evaluation run to Codex Cloud

    Each Codex Cloud task gets its own isolated workspace from a published environment of repositories, dependencies and tools, and keeps working while your computer is asleep.16 The run on the 500 past cases takes a while, so the engineer sends it to the environment Arjun published.

    From the terminal, codex cloud exec --env sends a task to a cloud environment, and the CLI reference marks codex cloud experimental.17 The push comes first. A cloud task works from its environment, and your computer's local files, running processes, browser sign-ins and VPN access are not carried over to it automatically.18

    Terminal
    git push
    codex cloud exec --env <rebooking-env-id> \
      'Run the evaluation on the 500 past cases in eval/cases.csv. Report the share handled right for each kind of case, codeshare as its own group, against the bar in docs/spec.md field 6. Change no code.'

Where ChatGPT and Codex let you down

  • Its instructions have a ceiling. Codex stops adding AGENTS.md files once their combined size reaches the project_doc_max_bytes limit, 32 KiB by default.19 Keep the root file short, and put a service's rules in that service's folder.
  • The browser stays in ChatGPT. ChatGPT's browser works on the web and in the desktop app, and is not available in Codex CLI or the IDE extension.20 So the walk through the agent's screen happens in the desktop app, not the terminal.
  • A cloud task is a workbench, not a record. A cloud task's saved state does not replace source control, and the docs say to commit the work that matters.21

Three settings decide how it behaves

1

The memory file: AGENTS.md

OpenAI's docs say to keep required team guidance in AGENTS.md or checked-in documents, and to treat memories as recall, never as the only source of a rule that must always apply.22 Local Codex memories are off by default, and kept apart from the memory ChatGPT uses on the web.23

2

Permissions: what it may do alone

The sandbox decides which files and network resources Codex's commands can reach, and the approval policy decides when it stops to ask before going further.24 On launch Codex recommends workspace write with approval on request in a folder under version control, and read-only anywhere else.25 In the default workspace-write sandbox, the .git, .agents and .codex folders, where they exist, stay read-only.26

3

Context: what each chat starts from

ChatGPT and Codex start with each skill's name and description and read its full SKILL.md only when they choose it, and with many skills installed Codex shortens the descriptions first.27 For local Codex chats, web search reads an index OpenAI maintains by default instead of fetching pages live, which lowers prompt injection risk without removing it.28 Install the skills the team uses, and no more.

The traps that catch a team

  • A scheduled task does not stop to ask. In the desktop app a scheduled task runs unattended with your default sandbox settings, and without approval prompts wherever your organisation's policy allows.29 With full access, a scheduled task in the background may change files, run commands and use the network without asking.30
  • An @codex comment on a pull request that asks for anything but a review starts a legacy cloud chat with the pull request as context, and it can push a fix to the branch when it has permission.31 Only @codex review asks for a review.
  • Code review and the GitHub and Linear integrations still run on Codex Cloud (Legacy), which OpenAI plans to deprecate.32
  • The flag --dangerously-bypass-approvals-and-sandbox, alias --yolo, removes both the sandbox and the approvals, and web search then defaults to live results.33
  • OpenAI warns against setting OPENAI_API_KEY or CODEX_API_KEY for a whole CI job that runs the repository's code, since its build scripts, tests and dependency hooks can read it.34
  • The approval policy untrusted is retired, and a configuration that still sets it can stop Codex or ChatGPT Work from starting.35
  • Prompts kept in OpenAI's dashboard have an end date. Reusable prompt objects in OpenAI's API are deprecated, and the v1/prompts API is scheduled to shut down on 30 November 2026.36

Where every fact on this page comes from

Each numbered mark above points to a row here: the fact, the vendor's page it was checked against, and the date. A date turns amber once it is more than 60 days old. Prices, usage limits and model names change too often to print: read them on ChatGPT's plans and prices, the Work and Codex pricing page and the models page.

Every fact this page uses, with its source and the date it was checked
No.The factSource, and when it was checked
1ChatGPT offers Chat for an answer or a short draft, and ChatGPT Work for a task with a clear outcome, such as a brief, an analysis or a file to review.learn.chatgpt.com/get-started-with-work
2OpenAI's Codex CLI runs Codex in a repository from your terminal, where it inspects code, edits files and runs commands.learn.chatgpt.com/cli
3OpenAI's prompt engineering guide says to use the Playground to develop and iterate on prompts.developers.openai.com/prompt-engineering
4OpenAI's prompting guide says to treat prompts as application code, reviewed in the same pull requests as the behaviour they support.developers.openai.com/prompting
5OpenAI's Evals platform is deprecated: existing evals become read-only on 31 October 2026, and its dashboard and API are scheduled to shut down on 30 November 2026.developers.openai.com/deprecations
6Computer and browser use, GitLab and self-hosted GitHub Enterprise Server are not yet supported in Codex Cloud environments.learn.chatgpt.com/cloud-environments
7A ChatGPT project gives its chats access to the same uploaded files, project instructions and connected sources.learn.chatgpt.com/projects
8A ChatGPT project has no direct access to a folder on your computer, so you upload or connect the sources you want it to use.learn.chatgpt.com/projects
9On the web a scheduled task can use uploaded files, connected tools, skills and plugins, but it cannot work directly in a folder on your computer.learn.chatgpt.com/automations
10The docs advise testing a scheduled task's prompt in a regular chat first, then reviewing its first few runs.learn.chatgpt.com/automations
11Codex reads AGENTS.md files before it does any work, from the repository's root down to the folder it starts in, and a nearer file overrides the ones above it.learn.chatgpt.com/agents-md
12If a repository has AGENTS.md and no CLAUDE.md or CLAUDE.local.md, Claude Code reads AGENTS.md.code.claude.com/memory
13For reviews on GitHub, Codex follows the ## Code Review Rules section of the AGENTS.md file closest to the code the rules govern.learn.chatgpt.com/github
14On GitHub, Codex flags only P0 and P1 issues, so its review comments stay on high-priority risks.learn.chatgpt.com/github
15OpenAI's guide says review rules guide Codex and do not replace tests, branch protections or required approvals.learn.chatgpt.com/github
16Each Codex Cloud task gets its own isolated workspace from a published environment of repositories, dependencies and tools, and keeps working while your computer is asleep.learn.chatgpt.com/cloud-environments
17From the terminal, codex cloud exec --env sends a task to a cloud environment, and the CLI reference marks codex cloud experimental. experimentallearn.chatgpt.com/developer-commands?surface=cli
18A cloud task works from its environment, and your computer's local files, running processes, browser sign-ins and VPN access are not carried over to it automatically.learn.chatgpt.com/modes
19Codex stops adding AGENTS.md files once their combined size reaches the project_doc_max_bytes limit, 32 KiB by default.learn.chatgpt.com/agents-md
20ChatGPT's browser works on the web and in the desktop app, and is not available in Codex CLI or the IDE extension.learn.chatgpt.com/browser
21A cloud task's saved state does not replace source control, and the docs say to commit the work that matters.learn.chatgpt.com/cloud-environments
22OpenAI's docs say to keep required team guidance in AGENTS.md or checked-in documents, and to treat memories as recall, never as the only source of a rule that must always apply.learn.chatgpt.com/memories
23Local Codex memories are off by default, and kept apart from the memory ChatGPT uses on the web.learn.chatgpt.com/memories
24The sandbox decides which files and network resources Codex's commands can reach, and the approval policy decides when it stops to ask before going further.learn.chatgpt.com/sandboxing
25On launch Codex recommends workspace write with approval on request in a folder under version control, and read-only anywhere else.learn.chatgpt.com/agent-approvals-security
26In the default workspace-write sandbox, the .git, .agents and .codex folders, where they exist, stay read-only.learn.chatgpt.com/agent-approvals-security
27ChatGPT and Codex start with each skill's name and description and read its full SKILL.md only when they choose it, and with many skills installed Codex shortens the descriptions first.learn.chatgpt.com/build-skills
28For local Codex chats, web search reads an index OpenAI maintains by default instead of fetching pages live, which lowers prompt injection risk without removing it.learn.chatgpt.com/web-search
29In the desktop app a scheduled task runs unattended with your default sandbox settings, and without approval prompts wherever your organisation's policy allows.learn.chatgpt.com/automations
30With full access, a scheduled task in the background may change files, run commands and use the network without asking.learn.chatgpt.com/automations
31An @codex comment on a pull request that asks for anything but a review starts a legacy cloud chat with the pull request as context, and it can push a fix to the branch when it has permission.learn.chatgpt.com/github
32Code review and the GitHub and Linear integrations still run on Codex Cloud (Legacy), which OpenAI plans to deprecate.learn.chatgpt.com/cloud-environments
33The flag --dangerously-bypass-approvals-and-sandbox, alias --yolo, removes both the sandbox and the approvals, and web search then defaults to live results.learn.chatgpt.com/agent-approvals-security
34OpenAI warns against setting OPENAI_API_KEY or CODEX_API_KEY for a whole CI job that runs the repository's code, since its build scripts, tests and dependency hooks can read it.learn.chatgpt.com/non-interactive-mode
35The approval policy untrusted is retired, and a configuration that still sets it can stop Codex or ChatGPT Work from starting.learn.chatgpt.com/agent-approvals-security
36Reusable prompt objects in OpenAI's API are deprecated, and the v1/prompts API is scheduled to shut down on 30 November 2026.developers.openai.com/deprecations

The same team, with Google's tools: the fourth manual.