From e58fe3c875730a1e0cd7c55090640f2ae4724f3b Mon Sep 17 00:00:00 2001
From: Cooper Gamble <cooper@openai.com>
Date: Wed, 17 Jun 2026 18:45:30 +0000
Subject: [PATCH] [codex] assert WIF env filtering semantically [ci
 changed_files]

---
 codex-rs/core/src/config/config_tests.rs | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/codex-rs/core/src/config/config_tests.rs b/codex-rs/core/src/config/config_tests.rs
index 98588d7c92..a386418e46 100644
--- a/codex-rs/core/src/config/config_tests.rs
+++ b/codex-rs/core/src/config/config_tests.rs
@@ -213,10 +213,8 @@ X-Safe = "SAFE_VAR"
         &config.permissions.shell_environment_policy,
         /*thread_id*/ None,
     );
-    assert_eq!(
-        shell_env,
-        HashMap::from([("SAFE_VAR".to_string(), "safe".to_string())])
-    );
+    assert_eq!(shell_env.get("SAFE_VAR").map(String::as_str), Some("safe"));
+    assert!(!shell_env.contains_key("CODEX_WIF_ASSERTION"));
 
     let plugins_manager = PluginsManager::new(codex_home.path().to_path_buf());
     let mcp_config = config.to_mcp_config(&plugins_manager).await;