Latest notes

Codex and Agent Harness Engineering Notes

Multilingual SEO notes distilled from public X discussions about Codex, Agent Harness, memory, tools, safety, and production agent engineering.

01
2026-09-29

AGENTS.md: writing project conventions into a file so Codex starts every session 'with context onboard'

Codex's docs dedicate a section to 'Agent configuration', centered on AGENTS.md, Subagents, Speed, and Rules. AGENTS.md is a project-level instruction file placed in the repo root that the agent reads before touching code — so build commands, test conventions, and naming rules are stably inherited instead of re-explained in every chat.

CodexAGENTS.mdContext
02
2026-09-29

Codex's security layering: how Profiles, Sandboxing, and Auto-review cage permissions

Codex's Permissions section lists five layers — Profiles, Sandboxing, Auto-review, Agent approvals & security, and Internet access. It's not an all-or-nothing switch but a layered mechanism that tightens agent permissions: sandboxes isolate the execution environment, auto-review gates code changes before they land, and internet access is controlled separately.

CodexSandboxPermissions
04
2026-09-29

The A2A protocol: letting agents from different companies and frameworks collaborate like colleagues

a2aproject/A2A (26k stars, hosted by the Linux Foundation and contributed by Google) defines the Agent2Agent open protocol, addressing how agents from different companies, frameworks, and servers collaborate 'as agents' rather than being called 'as tools'. It is built on JSON-RPC 2.0 over HTTP(S), discovers capabilities via Agent Cards, supports synchronous request/response, SSE streaming, and async push, and ships six language SDKs.

A2AInteropProtocol
05
2026-09-29

A2A's opaque collaboration: agents cooperate without exposing internal state, memory, or tools

The A2A protocol lists 'Preserve Opacity' among its design goals: agents can collaborate without sharing internal memory, proprietary logic, or specific tool implementations. Capabilities are exposed via the Agent Card as a 'minimal contract', while internal implementation stays a black box — solving both 'can cooperate' and 'dare to cooperate' for cross-company agents.

A2AOpacitySecurity
07
2026-09-29

Agent observability: using OpenTelemetry to turn a black-box agent into an accountable pipeline

The OpenTelemetry specification (a CNCF project, open-telemetry/opentelemetry-specification) defines traces, metrics, and logs as one cross-language, cross-implementation standard, versioned under Semantic Versioning 2.0. Codex's docs also list Tracing and Observability and usage as standalone modules — agent observability is moving from 'dig through logs after the fact' to 'structured, correlatable tracing'.

ObservabilityTracingOpenTelemetry
09
2026-09-29

Codex's model lifecycle: GPT-6 Sol/Luna rollout and the scheduled GPT-5.5 retirement

Codex's What's new shows: on September 21–25, GPT-6 Sol and GPT-6 Luna began rolling out in Codex at lower token prices than GPT-5.6; GPT-5.5 is scheduled to retire from ChatGPT, ChatGPT Work, and Codex on October 14, 2026. Model generational turnover is now a regular rhythm in Codex, which means a concrete upgrade window for workflows that depend on it.

CodexModelsLifecycle