Final competition snapshot for Codex Control Tower.
Public demo: https://youtu.be/EvtguYLSNkg (YouTube displays 2:59)
Highlights:
- Real gpt-5.6-sol through pinned Codex CLI 0.144.3 in an empty, ephemeral, read-only, no-tool workspace.
- Expected answers are withheld; zero tool events were accepted; GPT-5.6 cannot overwrite locked local facts.
- The controlled audit caught missing durable rejected-payment audit proof and raised HUMAN_REVIEW_REQUIRED. That FAIL is the product working; the model invocation and CI both completed successfully.
- Destructive Action Preflight records $HOME/.. as <USER_HOME_PARENT> -> BLOCKED / NOT_RUN / executed:false; no delete command is run.
- Static judge exhibit: https://zyganali-glitch.github.io/codex-control-tower/
- Screenshot and caption pack: DEVPOST_SCREENSHOTS.md
InvoiceFlow Mini is fictional. The scans, two focused tests, hashes, provenance checks, and recorded GPT-5.6 run are real controlled executions. The old openai-build-week-final tag remains the untouched v0.1 baseline.
Reproduce:
npm install
npm run verify
npm run demo:safety
npm run demo:codex