Codex Cloud quietly relaunches and can now reach your private services over Tailscale

Codex lead Tibo confirmed on Oct 8 that OpenAI "silently re-shipped" Codex Cloud, which is rolling out to Plus and higher and ships with Tailscale as its only VPN option, so cloud tasks can hit internal APIs and test services on your tailnet over HTTP/HTTPS (or TCP via proxy:8088). Tailscale says it wasn't involved and recommends a tagged, reusable, ephemeral auth key plus tight grants, since by default Codex can reach nearly everything on your tailnet.