OpenAI 正在准备新的 Codex Cloud，采用 Tailscale 和 Azure 工作负载标识
Desktop build 9922 将 "Cloud" 与 "Cloud (Legacy)" 分离，并将一个环境起草代理接入私有网络访问、通过代理传递的机密以及云身份，置于功能门控之后。
By Ryan Merket · Published
RUNTIMEWIRE INVESTIGATION — Original analysis
Original reporting by RuntimeWire, based on documents, reverse engineering, data analysis.
为何重要
如果推出，这将把环境设置和访问控制纳入编码代理本身，从而减少在私有代码库、网络和云资源上部署 Codex 所需的工作量。它也将更多的安全边界转移到 OpenAI 身上，要求企业信任其对可重用网络密钥、代理注入的凭据、工作负载身份以及代理提出的配置的处理。与自托管运行器相比，这种由服务方管理的模型可能会简化采用，但会使客户对执行基础设施的直接控制减少。
Reporting record
Finding
Production Codex desktop build 9922 contains a feature-gated replacement Cloud path that separates the existing service as “Cloud (Legacy)” and adds agent-led environment setup with Tailscale, network-secret and cloud-identity controls.
How we verified
Methods: documents, reverse engineering, data analysis.
Comparative analysis of production builds 9922 (26.915.31945) and 9275 (26.908.70816), including new Cloud labels, feature gate 375130565, environment setup states and schemas, Tailscale configuration, proxy-delivered network secrets, and Azure, AWS and Google Cloud identity controls.
RuntimeWire reverse-engineered and compared the client code and interface wiring in production builds 9922 and 9275, counted cloud-prototype references, and analyzed labels, feature gates, state handling, API schemas and configuration panels.
Tested versions:
- production build 9922 (26.915.31945)
- production build 9275 (26.908.70816)
Reproduction
RuntimeWire partially reproduced the finding.
Company response
The company was not contacted before publication.
我在 OpenAI 桌面版构建 9922 中发现证据，表明该公司正在开发一个新的 Codex Cloud 服务，与其现有系统并行。未发布的路径将 "Cloud" 与 "Cloud (Legacy)" 分开，允许 Codex 进行入门会话，检查所选仓库并为开发者准备环境草案。
随附的环境系统包括可重用的 Tailscale 身份验证密钥、通过代理传递的网络密钥和 OpenID Connect 云身份。Microsoft Azure 在此客户端构建中似乎比 Amazon Web Services 或 Google Cloud 进展更远，尽管仅凭客户端无法确定是否存在任何支持的后端。
A parallel Codex Cloud path
构建 9922 包含 “Cloud” 和 “Cloud (Legacy)” 的单独运行位置条目。新选项被描述为一个托管在云端的 Codex 任务，无法访问用户的计算机，而内部文案称 legacy 标签用于区分现有云任务与新服务。…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.