macOS Codex Desktop repeatedly invalidates code signature and triggers syspolicyd/trustd high CPU #28583

Environment:

• macOS: [your macOS version]
• Machine: MacBook Pro, Apple Silicon / arm64
• Codex Desktop path: /Applications/Codex.app
• Codex install date observed: Jun 15, 2026
• Workspace: external volume, /Volumes/STORE N go/IDB

Problem:
After reinstalling Codex Desktop, it works for a while, then macOS starts heating up. Activity Monitor / ps shows syspolicyd and trustd using very high CPU whenever Codex Desktop is open.

Observed process usage:

• syspolicyd around 140-190% CPU
• trustd around 65-95% CPU
• Codex.app open at the same time

Diagnostics:
codesign --verify --deep --strict --verbose=2 /Applications/Codex.app returns:

/Applications/Codex.app: invalid signature (code or signature have been modified)
In architecture: arm64

spctl --assess --type execute --verbose=4 /Applications/Codex.app returns:

/Applications/Codex.app: internal error in Code Signing subsystem

Earlier, the Computer Use helper also showed:

/Users/vhdelgado/.codex/computer-use/Codex Computer Use.app: invalid signature (code or signature have been modified)

I disabled notify, disabled browser@openai-bundled, and blocked ~/.codex/computer-use, so SkyComputerUseService no longer appears. However, the issue still returns with the main /Applications/Codex.app bundle.

Expected:
Codex.app should remain validly signed after installation/update and should not trigger repeated syspolicyd/trustd trust evaluation loops.

Impact:
The machine overheats and Codex Desktop becomes unsafe to keep open for long sessions.

Workaround:
Quit Codex and run:
osascript -e 'quit app "Codex"'
sudo killall -9 syspolicyd trustd