Codex Cloud re-ships with Tailscale: cloud agents can now reach your private tailnet

#What happened

The Codex account posted two "Day 3 (encore)" announcements today in the 28-day ship-or-reset series, reposted by Thibault Sottiaux (Tibo): "We silently re-shipped codex cloud. It's pretty good now."

#Tailscale support

The second announcement: "Codex 🤝 Tailscale — Codex Cloud can now securely connect to resources on your tailnet with Tailscale." Your Codex Cloud agent can now reach the services and machines on your private Tailscale network without exposing them to the public internet.

#Why it matters

This matches September 20 reporting that OpenAI was building a feature-gated Codex Cloud path with Tailscale wiring and cloud-identity controls. The wiring appears to be shipped now. Private-network access is the step that makes Codex Cloud usable against real company infrastructure, and it lands as Tibo's Day 3 entry in his pledge to ship one real improvement per day for 28 days. SOURCES

• https://twiscan.com/en/x/thsottiaux (Tibo's X timeline, verified Oct 8 2026; shows the "Day 3 (encore)" Codex Cloud re-ship and the "Codex 🤝 Tailscale" announcement)
• https://runtimewire.com/article/openai-is-preparing-a-new-codex-cloud-with-tailscale-and-azure-workload-identity (Sep 20 2026 reporting on the feature-gated Tailscale build) Verified October 8, 2026.