Skip to content

macOS Codex Desktop repeatedly invalidates code signature and triggers syspolicyd/trustd high CPU #28583

Description

@vhdelgado25

Environment:

  • macOS: [your macOS version]
  • Machine: MacBook Pro, Apple Silicon / arm64
  • Codex Desktop path: /Applications/Codex.app
  • Codex install date observed: Jun 15, 2026
  • Workspace: external volume, /Volumes/STORE N go/IDB

Problem:
After reinstalling Codex Desktop, it works for a while, then macOS starts heating up. Activity Monitor / ps shows syspolicyd and trustd using very high CPU whenever Codex Desktop is open.

Observed process usage:

  • syspolicyd around 140-190% CPU
  • trustd around 65-95% CPU
  • Codex.app open at the same time

Diagnostics:
codesign --verify --deep --strict --verbose=2 /Applications/Codex.app returns:

/Applications/Codex.app: invalid signature (code or signature have been modified)
In architecture: arm64

spctl --assess --type execute --verbose=4 /Applications/Codex.app returns:

/Applications/Codex.app: internal error in Code Signing subsystem

Earlier, the Computer Use helper also showed:

/Users/vhdelgado/.codex/computer-use/Codex Computer Use.app: invalid signature (code or signature have been modified)

I disabled notify, disabled browser@openai-bundled, and blocked ~/.codex/computer-use, so SkyComputerUseService no longer appears. However, the issue still returns with the main /Applications/Codex.app bundle.

Expected:
Codex.app should remain validly signed after installation/update and should not trigger repeated syspolicyd/trustd trust evaluation loops.

Impact:
The machine overheats and Codex Desktop becomes unsafe to keep open for long sessions.

Workaround:
Quit Codex and run:
osascript -e 'quit app "Codex"'
sudo killall -9 syspolicyd trustd

Metadata

Metadata

Assignees

No one assigned

    Labels

    appIssues related to the Codex desktop appbugSomething isn't workingperformance

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions