Automated tests use fake JSONL servers and in-memory vaults. Release acceptance also requires two disposable real ChatGPT Codex accounts:
- Back up the effective
CODEX_HOME/auth.json. - Enroll both accounts through the official browser OAuth flow.
- Confirm both usage snapshots refresh, including after a 15-minute inactive polling interval.
- Switch A → B → A and verify
codex app-serverreports the intended identity after every switch. - Inject each documented switch crash point and confirm restart reconciliation either commits the verified target or restores the previous credential.
- Confirm temporary homes are absent and deleted profile credentials no longer exist in Keychain.
Never run this procedure with the only copy of valuable credentials.