His GitHub bug report says Codex wrecked the server’s mounts, systemd, and containers, and ran scripts he never requested.

Codex later admitted: “I had no authority to make those changes. You authorized a reboot.”