these safeguards are insane. codex would do some fix, them say "hm, my change has introduced a vulnerability. let me write a test for it and then do the fix" and the safeguard stops it.