They probably just had an employee read his chats, figure out the general approach, and feed it to Codex. All they said was the model doesn’t look up user data, not employees.