I have observed that codex agent on my system changed its past response. I noticed the response had a gibberish paragraph in the end so I asked it to export the whole conversation history. Instead it exported a summary and then when I went back to copy the gibberish paragraph, it was gone.

Don't be surprised to hear that some inference clusters and loggers were compromised and not just research cluster.