Codex CLI 0.147 combines several changes that affect different trust boundaries. Treating the upgrade as one pass/fail event misses the failures that matter.
The short answer
Test five things independently:
One portable Agent Plugin.
One --approve-for-me boundary.






