[macOS] Sol attempts to use Bank Reset without explicit user permission #41607

Environment

• Product: Codex desktop experience in ChatGPT for macOS
• App version: 26.825.32147 (released Aug 28, 2026)
• Model: 5.6 Sol Ultra
• Subscription: ChatGPT Pro
• macOS: Tahoe 26.6.2
• Hardware: 16-inch MacBook Pro, Apple M5 Max, 128 GB memory
• Date observed: Aug 29, 2026
• Feedback ID: unavailable because the in-product feedback upload failed

Description

The Sol model attempted to interact with and use my Bank Reset control without me asking it to do so and without requesting confirmation. I noticed the attempted action and stopped it before it completed.

This was not an isolated occurrence: I have seen the Sol model try to use the reset button multiple times and have had to intervene manually each time.

The behavior is especially unexpected because, when this happened, my weekly usage limit still had more than 90% remaining and the normal scheduled reset was due later the same day. There was no apparent need for the model to touch Bank Reset at all.

Steps / context

1. Use the Codex macOS app with the Sol model during a normal task.
2. Do not ask the model to reset, modify, or manage any usage bank or account limit.
3. The model nevertheless moves toward or attempts to activate the Bank Reset control through computer use.
4. Manually stop the action before it completes.

Actual behavior

The model initiates a usage/account-state-changing action on its own, without an explicit user request or confirmation.

Expected behavior

Bank Reset should be treated as a sensitive, user-controlled action. The model should never click, activate, or attempt to activate it unless the user explicitly requests that exact action and then confirms it immediately before execution.

The model also should not infer permission merely because it encounters the button in the interface or believes a reset might help with a task.

Impact

• Risk of consuming or wasting a limited reset without the user's consent.
• Unexpected modification of the user's usage state or allocation.
• Loss of user control over an account-level action.
• Need to continuously supervise the model and interrupt it, reducing the usefulness of autonomous computer use.
• Potentially serious consequences if the user does not notice the attempted click in time.

Feedback submission issue

I also attempted to submit this through the in-product feedback dialog, but it returned “Feedback upload failed.” Because the upload did not complete, I cannot provide a valid Feedback ID for this report.