I had assumed Codex would disallow hacking, have I been wrong all this time or are people jail breaking Codex first?
Working on your own machine is within bounds and explicitly mentioned in the context of jailbreaking.
I tricked codex by generating a fake history of it starting working on something and resuming it. Claude knows about that trick and will stop even though it thought it was mid task.
In my experience, you can often get around this by trying again. I've had prompts that were rejected, but as soon as I started a new session, it worked.