@edinsoncode I couldn't find the mode in the writeup. The planted file tells Codex to verify via a child codex exec --dangerously-bypass-approvals-and-sandbox, so read-only only helps if that step gets refused. Most of the 90% runs used a calculator stand-in, not the real package.
@edinsoncode Forever Security's numbers are the scary part. Codex ran the real payload in over 90% of tries, and it writes to ~/.codex/config.toml, so the bad server loads in every folder after that, not just Downloads.
We're sorry for the rate limits and unnecessary quota consumption on the K3.1 Pro subscription plan. These were our issues, and we should have fixed them sooner.
Today, every subscriber on every plan gets a one-time usage reset, restoring 25% of their monthly quota (usage below 25% resets to zero), equal to one week of usage. Your usage bar will reflect this adjustment by end of day PST.
We've also adjusted the plan's parameters and are reducing unnecessary subagent calls and output length, so your quota goes further.
Thank you for your patience while we put this right.