Build1 distinct publisher3 min readPublished
RuntimeWire's teardown of OpenAI's Windows Codex package found a gated review system that pins assignments to cells and slides, batches them for one agent turn, and keeps the ChatGPT side of the thread out of the exported file.
The Engineer · Build desk

Compiled by The EngineerSomething wrong?How this is made
The sidebar merges two thread types that do not have the same lifetime [21]. Native Excel and PowerPoint comments are described by the interface as saved directly into the Office file [2]. The ChatGPT assignments are described in the code as persistent but non-exported artifact comments [3]. A workbook that leaves the building therefore carries the human comments and the changed cells, and not the sentence that asked for the change.
RuntimeWire frames the feature as OpenAI turning document review into delegated agent work, where users define tasks in context, batch them, and keep control over whether the agent's edits close the assignment [19]. That is a fair product description. As a logging design, it puts the instruction in client state and leaves the artifact holding only the outcome.
The dispatch side is a strict contract. Hidden instructions require the model to address every assigned thread, edit the artifact when requested, and return exactly one structured artifact-comment-reply per thread [c6b], and the client intercepts those replies to route each one to its thread [7]. That is a state machine keyed on an exact output count. The teardown documents the requirement; it does not describe the branch that runs when a model returns two replies for one thread, or none. In my experience that branch has the thinnest test coverage in the file.
Writeback is where the document actually changes. PowerPoint comment changes are serialized back into PPTX bytes using bundled OpenXML infrastructure [8]. Excel changes pass through a durable workbook-update system with conflict handling and are materialized into a new XLSX file [9]. RuntimeWire treats that pair of paths as the evidence that native comments are meant to live in the Office files rather than exist as overlays inside ChatGPT [10].
For any of this to transfer to a fleet, several things have to hold. The code is controlled by feature gate 1246162292 and also requires the artifact panel expanded to full width [5], so two conditions sit in series and a tester who cannot see the panel has learned nothing about what is in the binary [13]. RuntimeWire says plainly that presence in a production client does not establish that OpenAI has enabled the feature for ordinary users [12]. The implementation was absent from builds checked through internal version 26.820.71523 and present by 26.825.32147 [11], while the same tested client also reports a Microsoft Store package number, which means the package string is not a usable key for asking which internal build you have [14].
Credit where it is due on method. The principal evidence is production minified JavaScript, and RuntimeWire says descriptive variable and component names counted only when executable control flow, interface copy, persistence operations or model-dispatch behavior corroborated them [18]; it also says the finding was only partially reproduced [17]. OpenAI's public documentation covers file previews, selection-based revisions, separate Excel and PowerPoint add-ins, and comments on webpages in Codex's browser [15], and RuntimeWire found nothing public describing this threaded review system, its private comment layer, its queue or its reply protocol [16]. Until such documentation exists, anyone asking what a delivered workbook was told to do has to ask the client rather than the file.
Ranked by verification strength, evidence, and original report placement.
RuntimeWire analyzed the production app.asar distributed with OpenAI's Windows desktop package OpenAI.Codex_26.825.4187.0, internal application version 26.825.32147, as original reporting based on reverse engineering.
The client contains a feature called "Artifact comments" with two parallel comment systems, the first being native Excel and PowerPoint comments, described by the interface as being saved directly into the Office file.
The second system is private ChatGPT comment threads, described in the code as persistent but non-exported artifact comments assigned to ChatGPT.
Users can select an Excel range, chart, PowerPoint slide, shape or presentation element, leave a file comment, or choose "Ask ChatGPT for a change"; multiple ChatGPT requests can be placed into an "Add to review" queue and sent together.
The system is controlled by feature gate 1246162292 and requires the artifact panel to be expanded to full width.
The client submits these requests using a dedicated artifact_comment agent-turn trigger.
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 28, 2026
Follow any of these and your For You feed starts watching them — no settings page required.
build
OpenAI ships 467 versioned interface types inside Codex, and no door for anyone else1 distinct publisher
build
OpenAI is paying for onboarding completion, and the price is set by remote config1 distinct publisher
invest
Water permits and county races now set the pace of a $700bn data center build1 distinct publisher
build
MCP's roadmap fast-tracks five priorities and quietly queues everything else1 distinct publisher
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Hash-anchored, one reader
One team read minified JavaScript, but read it the hard way: a preserved app.asar with its SHA-256 published, a named internal build, a differential against older archived bundles that dates the code's arrival, and a stated rule that suggestive variable names counted only where control flow, interface copy, a write to disk or a model dispatch agreed. What is absent is a second pair of eyes — the reproduction is RuntimeWire's own and partial, and OpenAI said nothing before publication.
Shipped code, closed gate
The code is on users' machines and that is the entirety of the adoption story. A feature gate and a full-width-panel condition stand between the implementation and anyone's screen, and RuntimeWire says outright that presence in a production package establishes nothing about enablement. No enabled accounts, no usage numbers, not even a documentation page to point a user at.
Findings restrained, framing forward
The hedge a reader needs is RuntimeWire's own sentence: presence in a production client does not establish that OpenAI has enabled this for anyone. The packaging runs further than that — "hidden task system" in the headline, and a "why it matters" line about OpenAI turning document review into delegated agent work, drawn from a gated build and no statement from the company. Small gap, and it lives in the framing rather than the findings.
Scoop economics, openly disclosed
Only one party has anything at stake in how this is told, and it is the publisher: a reverse-engineering exclusive is worth more with a big strategic claim attached, and this one is badged "Scoop" at the top. Working against that pull is an unusual amount of self-exposure — the file hash, the tested versions, the corroboration rule, the partial-reproduction admission, and the note that comment was requested and never came. OpenAI has no stake in the telling because OpenAI has not spoken.
Firm on the bytes, soft on the meaning
What is inside a specific hashed archive is about as settled as a single-source finding gets. Everything after that is loose: one publisher, no vendor confirmation, no independent teardown, and a gated feature that can be renamed, switched off or removed in the next build with no announcement — leaving the reporting accurate about a file that may no longer describe the product.