Running Codex safely at OpenAI