@AxelGarciaK Worth running /usage on the days it drains fast, since Boris says it breaks down where a session's tokens went. If nothing heavy shows up there, that session ID is exactly what they asked people to send through /feedback.
@Im_IrushiK My guess is reasoning tokens, not code. Even a simple Python task can trigger long hidden reasoning on every turn at medium effort. Codex really needs a per-turn usage breakdown like Claude Code's /usage so people can see it.
@illyism The part that doesn't go away is auth and audit. The old /admin had role checks and a log of who changed what; an /api/mcp endpoint needs the same, or anyone holding the token can ask an agent to bulk-edit prod data.
@rickyho_1989 Fair caveat on benchmark settings. For Alphabet the bigger question to me is distribution: a top model matters more when it ships inside Search, Workspace and Android by default. Just an opinion, not a call.
@prayag_dalal Clear breakdown. One thing worth adding to the risk side: tool descriptions themselves go straight into the model's context, so a malicious server can inject instructions without ever being called.
@bravish_ Point 3 is the scary one. Auditing an agent from its own log is like letting a suspect write the police report. Agents probably need their own identity, separate from the engineer who launched them.