Skip to content

Releases: leixyou/bypass-codex-site-safety

Release list

Computer Use local patch v3 (stock SIP / AMFI -424)

Computer Use local patch v3 (stock SIP / AMFI -424) Latest
Latest

Choose a tag to compare

View all tags
@leixyou leixyou released this 06 Oct 04:33
computer-use-v3
792b546

computer-use-v3 — stock SIP path (AMFI -424)

v2 ad-hoc-signed SkyComputerUseService while keeping OpenAI’s restricted entitlements (application-identifier, team-identifier, application-groups, keychain-access-groups). On stock SIP, AMFI aborts launch:

AppleMobileFileIntegrityError Code=-424
The file is adhoc signed but contains restricted entitlements

That was issue #4. Disabling SIP is not required.

v3:

  • Strip team-bound entitlements and embedded.provisionprofile
  • Ad-hoc sign with unrestricted com.apple.security.* only
  • Inject cua-appgroup.dylib so App Group / native pipe still work
  • Keep v2 URL kill bypass (blockedURL -10015) and LaunchAgent repair
  • ./install-computer-use.sh / status print SIP + Developer Mode
  • Install exits 2 on Apple Silicon if Developer Mode is off (patch is applied; helper will not launch until you enable it)

Install

Apple Silicon: System Settings → Privacy & Security → Developer Mode, restart, then:

git clone https://github.com/leixyou/bypass-codex-site-safety.git
cd bypass-codex-site-safety
chmod +x install.sh install-computer-use.sh
./install.sh
./install-computer-use.sh
./install-computer-use.sh status

Quit ChatGPT.app (Cmd+Q). Re-grant Accessibility / Screen Recording (new ad-hoc identity). Start a new Computer Use turn.

status should show restricted entitlements=none and helper launch gate ok.

This release is the patcher, not a redistributed ChatGPT.app.

Assets 3
Loading

Computer Use local patch v2 (blockedURL + persist, verified)

Computer Use local patch v2 (blockedURL + persist, verified)

Choose a tag to compare

View all tags
@leixyou leixyou released this 28 Sep 15:44
computer-use-v2
b44bfe3

computer-use-v2 — Computer Use URL kill bypass (verified)

v1 only patched forbidden-app checks. ChatGPT recopies the official helper on launch, so that patch vanished and Computer Use still died with blockedURL (-10015). The Chinese line “当前 URL 不允许 Computer Use” is the model paraphrasing the English kill string.

v2 (verified on ChatGPT.app 26.924.22138):

  • Skip throwMappedServerError for blockedURL (-10015)
  • Rewrite the kill string in service / client / lock-screen guardian
  • JS overlay drops -10015; app policy denied/forbidden treated as allowed
  • LaunchAgent com.codex-computer-use-lab.repair re-applies after ChatGPT restores the helper
  • Sparkle auto-update on the local helper is turned off

This release is the patcher, not a redistributed ChatGPT.app.

Install both gates

git clone https://github.com/leixyou/bypass-codex-site-safety.git
cd bypass-codex-site-safety
chmod +x install.sh install-computer-use.sh
./install.sh
./install-computer-use.sh

Quit ChatGPT.app (Cmd+Q), re-grant Accessibility / Screen Recording if macOS asks, then start a new Computer Use turn.

Or unpack this zip and run the same scripts.

Loading