What changed in legal AI workflows
Daily automation tracks trusted OpenAI, Claude, GitHub, and legal-tech sources so tutorials stay current and useful for legal work.
Latest verified: Jun 16, 2026
Codex regional rollout and Claude reliability fixes
OpenAI's June 16 Codex changelog says Computer Use, the Codex Chrome extension, Memories, and the Chronicle research preview are rolling out in the EEA, UK, and Switzerland, with Memories off by default in those regions. Claude Code 2.1.179 fixes mid-stream connection drops, large Linux sandbox read-rule glob expansion, remote-session background-task status, subagent transcript and focus issues, and remote plugin-loading performance; the allowlisted Claude Code Action also bumped to 2.1.179.
Sources checked
Affected pages
Recommended action
For legal teams in these regions, confirm user consent, device policy, Chrome signed-in context, memory defaults, Chronicle opt-in scope, sandbox file-rule behavior, partial-output audit trails, background-task status, subagent transcript review, and pinned Claude Action version before client-data workflows.
Codex usage controls and Claude permission rules
OpenAI's June 15 Codex CLI 0.140.0 changelog adds `/usage` token-activity views, permanent session deletion, Claude Code import, unified file/plugin/skill mentions, managed Bedrock API-key authentication, encrypted CLI/MCP OAuth credential storage, MCP startup and OAuth reliability fixes, and remote plugin installation fixes. Claude Code 2.1.178 adds parameter-scoped permission rules, nested `.claude/skills` loading, closest-directory project settings precedence, auto-mode review for subagent spawns, and fixes for MCP subagent `disallowedTools`.
Sources checked
Affected pages
Recommended action
For legal teams, re-check token usage audit evidence, session-retention and deletion policy, imported Claude Code project settings, Bedrock/API credentials, OAuth storage, plugin provenance, nested skill precedence, parameter-scoped tool rules, subagent auto-mode review, and MCP deny rules before running repository agents on client-data systems.
Claude Action allowed-tools parsing tightened
Allowlisted Claude Code Action commits fixed two `claude_args` parsing gaps: unquoted scoped Bash rules such as `Bash(gh:*)` could collapse to broader Bash access, and MCP server installation could diverge from the SDK's parsed `--allowedTools` grant when multiple values or commented lines were present.
Sources checked
Affected pages
Recommended action
For legal repository automations, quote scoped tool rules, keep `--allowedTools` blocks free of commented-out grants, pin the action version, and re-check MCP server installation against the exact tools granted before letting workflows touch client-data repositories.
Codex browser debugging and Claude Action reliability
OpenAI's June 11 Codex app 26.609 changelog adds Developer mode for Browser use through Chrome DevTools Protocol access, `/init` in the app composer, Computer Use expansion and Windows per-app access controls, usage-limit guidance, plugin management improvements, and a fix so scheduled automations honor the selected approval mode. Allowlisted Claude Code Action commits also bump Claude Code to 2.1.175, preserve inherited auth environment variables when inputs are empty, and stop SDK workflows from hanging after a terminal result message.
Sources checked
Affected pages
Recommended action
For legal teams, re-check Browser Developer mode authorization, captured console/network data, Computer Use app scope, scheduled automation approval modes, plugin provenance, Claude Action credential precedence, and workflow timeout handling before running agents against client-data repositories.
Guardrail and Claude workflow controls refreshed
OpenAI's June 4 API changelog adds moderation scores to Responses and Chat Completions generation requests, while Claude Code 2.1.163 adds managed minimum and maximum version settings, `/plugin list`, hook continuation context, MCP session ID continuity, and multiple permission, background-session, and Windows reliability fixes; Claude Code 2.1.165 is a reliability release.
Sources checked
Affected pages
Recommended action
For legal workflows, log inline moderation results without storing sensitive prompt text, keep attorney review for legal conclusions, pin Claude Code versions through managed settings, audit enabled plugins with `/plugin list`, and retest hook/MCP behavior before unattended client-data work.
Codex Sites and Claude workflow identity controls
OpenAI's June 2 Codex changelog adds Sites preview in the Codex app, iOS Codex controls for Face ID or passcode lock, Queue versus Steer follow-up defaults, Windows SSH connections, `/side <prompt>`, and host/task reliability fixes. The OpenAI API changelog also moves eligible container sessions to per-minute billing with a five-minute minimum, while an allowlisted Claude Code Action commit adds workload identity federation inputs to the base action and requires GitHub OIDC write permission for OIDC token exchange.
Sources checked
Affected pages
Recommended action
For legal workflows, review hosted-site scope, environment variables and secrets, mobile device policy, Windows SSH trust, container-session cost controls, GitHub OIDC permissions, federation rule ownership, and static credential fallback before using Codex Sites or Claude Actions on client-data systems.
Codex 0.132.0 and Secure MCP Tunnel controls
OpenAI's Codex 0.132.0 changelog adds Python SDK authentication, simpler text-only turn APIs, structured output support for resumed exec sessions, standard Codex auth for remote executors, and app-server image-fidelity preservation; the OpenAI API changelog also introduced Secure MCP Tunnel for account-led enterprise access to private MCP servers.
Sources checked
Affected pages
Recommended action
For legal automation, re-check SDK auth storage, resumed-session schemas, remote-executor identity, private MCP tunnel ownership, and human review before connecting privileged repositories or client-data systems.
Codex and Claude agent operations refreshed
Codex CLI 0.131.0 adds richer TUI controls, unified file/plugin/skill mentions, plugin marketplace commands, remote-control support, the `openai-codex` Python SDK package, and `codex doctor`; Claude Code 2.1.144 adds background-session resume support and fixes plugin, MCP, headless, remote-login, and background-agent reliability issues.
Sources checked
Affected pages
Recommended action
For legal repositories, pin and test agent CLI versions before rollout; verify plugin dependency chains, MCP pagination/tool lists, remote-login policy, background-session isolation, Python SDK package names, and diagnostic output before unattended or client-data workflows.
Remote Codex and Claude agent controls for legal workflows
OpenAI's Codex changelog adds mobile remote access through a connected Mac plus hooks, access-token, and enterprise setup guidance, while Claude Code 2.1.143 tightens plugin, worktree, hook, background-session, and Windows behavior.
Sources checked
Affected pages
Recommended action
Before remote or background legal-agent work, confirm the trusted host, token scope, plugin dependency chain, worktree isolation mode, MCP settings, hook stop policy, and human review gate.
Repository-agent pull request instructions need explicit scoping
Codex Action now calls PR-controlled project instruction files untrusted input, while Claude Code Action tightened tag-mode scoping so only the trigger comment or issue body acts as instructions.
Sources checked
Affected pages
Recommended action
In legal repository-agent workflows, treat PR bodies, comments, commits, screenshots, and checked-out instruction files as evidence context unless the trusted trigger explicitly authorizes a change; keep checkout credentials non-persistent and require human merge review.
Claude Code 2.1.141 hook, plugin, and agent controls
Claude Code 2.1.141 adds hook terminal-sequence output, HTTPS plugin cloning, workspace-scoped federation, directory-scoped agent listing, recent-session feedback bundles, and background-agent permission fixes.
Sources checked
Affected pages
Recommended action
For legal workflows, retest hooks that notify or title terminals, prefer HTTPS plugin installs where SSH keys are unavailable, scope agent audits with `claude agents --cwd`, and confirm background agents keep the intended permission mode.
Claude Code 2.1.139 updates agent, hook, and MCP controls
Claude Code 2.1.139 adds agent view, `/goal`, direct hook argument execution, PostToolUse continuation, MCP project-directory environment support, and subagent telemetry headers.
Sources checked
Affected pages
Recommended action
Before using Claude Code on client or privileged workflows, retest hooks, MCP configs, and goal-driven sessions in a sandbox with audit logging and human review.
Codex Auto-review and repair-loop guidance for legal repositories
OpenAI expanded Codex Auto-review documentation and published Codex cookbook examples for iterative repair and agent-improvement loops using traces and evals.
Sources checked
Affected pages
Recommended action
Treat Auto-review as an additional approval signal, not legal sign-off; keep sandbox boundaries, eval criteria, source checks, and human diff review explicit.
GitHub MCP and Agentic Workflows backfill for legal repository agents
GitHub's MCP Server gained Projects tooling, HTTP server mode, and permission-aware tool filtering, while Agentic Workflows entered technical preview for AI agents inside GitHub Actions.
Sources checked
Affected pages
Recommended action
For legal repository agents, require repository secrets, least-necessary workflow permissions, explicit MCP tool allowlists, and human merge review before production changes.
GitHub MCP secret scanning controls for legal repository agents
GitHub MCP Server secret scanning is generally available for repositories with GitHub Secret Protection, giving MCP-compatible agents and IDEs a pre-commit and pre-PR credential check.
Sources checked
Affected pages
Recommended action
Before agent-authored legal repository changes, keep push protection enabled, scan for secrets through approved MCP-compatible tooling, and require human review before merge.
MCP research workflows now require source-coverage checks
Research guidance now separates model knowledge from current source access and requires jurisdiction, date, treatment, and MCP tool-scope checks before legal reliance.
Sources checked
Affected pages
Recommended action
For current-law research, confirm the connected source set, jurisdiction/date coverage, treatment/status data, and tool allowlist before drafting conclusions.
OpenAI model, plan, and Responses API documentation refresh
OpenAI docs now emphasize current GPT-5.5/GPT-5.4-era model guidance, updated ChatGPT plan naming, and Responses API plus built-in tools as the starting point for new API workflows.
Sources checked
Affected pages
Recommended action
For legal workflows, avoid stale GPT-4 or fixed-price plan advice; verify the current model, plan, tool, retention, and review controls before piloting client-facing automation.
Claude Code 2.1.133 automation reliability changes
Claude Code added worktree base controls, effort-aware hooks, managed sandbox settings, and fixes for MCP OAuth, subagent skill discovery, and concurrent sessions.
Sources checked
Affected pages
Recommended action
For legal automation agents, pin worktree behavior deliberately and retest hooks, MCP auth, and subagent skill discovery before production runs.
Codex app automation backfill for legal workflows
Codex docs now emphasize recurring app automations, linked-repo worktrees, browser permissions, subagents, plugins, and CLI sandbox or approval profile controls.
Sources checked
Affected pages
Recommended action
Before running unattended legal agents, pin sandbox and approval settings, keep source allowlists explicit, and route Codex automation changes through reviewable PRs.
OpenAI Realtime and Codex plugin refresh
OpenAI released Realtime 2, streaming translation and transcription updates, and the OpenAI Developers plugin for Codex.
Sources checked
Affected pages
Recommended action
For legal intake or multilingual voice workflows, verify realtime model and API guidance before piloting client-facing automations.
Claude Code automation patterns for legal content workflows
Claude Code GitHub Actions supports scheduled and event-driven coding workflows, including skills and prompt-driven automation that can help maintain tutorial quality.
Sources checked
Affected pages
Recommended action
Keep Claude tutorials aligned with current GitHub Action and skill behavior before translation waves run.
Daily Codex automation loop for legal AI tutorials
We are adding a source-backed automation workflow that researches Codex and Claude changes, proposes tutorial updates, and hands approved changes to translation agents.
Sources checked
Affected pages
Recommended action
Use the updates page to track what changed, which sources were checked, and which tutorials need refresh work.