Codex cold-resume used machine default permissions; OpenAI merged a main-branch fix
A saved Codex thread resumed from cold was building its network proxy from the machine's default permissions instead of the thread's saved ones. OpenAI merged an Oct 12 fix that applies eligible saved permission profiles during config load before network setup; it is on main only—not yet in shipped 0.162.1.