Skip to main content
Source-backed updates

What changed in legal AI workflows

Daily automation tracks trusted OpenAI, Claude, GitHub, and legal-tech sources so tutorials stay current and useful for legal work.

Latest verified: Jun 16, 2026

site
Approved
Jun 16, 2026

Codex regional rollout and Claude reliability fixes

OpenAI's June 16 Codex changelog says Computer Use, the Codex Chrome extension, Memories, and the Chronicle research preview are rolling out in the EEA, UK, and Switzerland, with Memories off by default in those regions. Claude Code 2.1.179 fixes mid-stream connection drops, large Linux sandbox read-rule glob expansion, remote-session background-task status, subagent transcript and focus issues, and remote plugin-loading performance; the allowlisted Claude Code Action also bumped to 2.1.179.

Sources checked

Affected pages

Recommended action

For legal teams in these regions, confirm user consent, device policy, Chrome signed-in context, memory defaults, Chronicle opt-in scope, sandbox file-rule behavior, partial-output audit trails, background-task status, subagent transcript review, and pinned Claude Action version before client-data workflows.

site
Approved
Jun 15, 2026

Codex usage controls and Claude permission rules

OpenAI's June 15 Codex CLI 0.140.0 changelog adds `/usage` token-activity views, permanent session deletion, Claude Code import, unified file/plugin/skill mentions, managed Bedrock API-key authentication, encrypted CLI/MCP OAuth credential storage, MCP startup and OAuth reliability fixes, and remote plugin installation fixes. Claude Code 2.1.178 adds parameter-scoped permission rules, nested `.claude/skills` loading, closest-directory project settings precedence, auto-mode review for subagent spawns, and fixes for MCP subagent `disallowedTools`.

Sources checked

Affected pages

Recommended action

For legal teams, re-check token usage audit evidence, session-retention and deletion policy, imported Claude Code project settings, Bedrock/API credentials, OAuth storage, plugin provenance, nested skill precedence, parameter-scoped tool rules, subagent auto-mode review, and MCP deny rules before running repository agents on client-data systems.

claude
Approved
Jun 14, 2026

Claude Action allowed-tools parsing tightened

Allowlisted Claude Code Action commits fixed two `claude_args` parsing gaps: unquoted scoped Bash rules such as `Bash(gh:*)` could collapse to broader Bash access, and MCP server installation could diverge from the SDK's parsed `--allowedTools` grant when multiple values or commented lines were present.

Sources checked

Affected pages

Recommended action

For legal repository automations, quote scoped tool rules, keep `--allowedTools` blocks free of commented-out grants, pin the action version, and re-check MCP server installation against the exact tools granted before letting workflows touch client-data repositories.

site
Approved
Jun 12, 2026

Codex browser debugging and Claude Action reliability

OpenAI's June 11 Codex app 26.609 changelog adds Developer mode for Browser use through Chrome DevTools Protocol access, `/init` in the app composer, Computer Use expansion and Windows per-app access controls, usage-limit guidance, plugin management improvements, and a fix so scheduled automations honor the selected approval mode. Allowlisted Claude Code Action commits also bump Claude Code to 2.1.175, preserve inherited auth environment variables when inputs are empty, and stop SDK workflows from hanging after a terminal result message.

Sources checked

Affected pages

Recommended action

For legal teams, re-check Browser Developer mode authorization, captured console/network data, Computer Use app scope, scheduled automation approval modes, plugin provenance, Claude Action credential precedence, and workflow timeout handling before running agents against client-data repositories.

site
Approved
Jun 5, 2026

Guardrail and Claude workflow controls refreshed

OpenAI's June 4 API changelog adds moderation scores to Responses and Chat Completions generation requests, while Claude Code 2.1.163 adds managed minimum and maximum version settings, `/plugin list`, hook continuation context, MCP session ID continuity, and multiple permission, background-session, and Windows reliability fixes; Claude Code 2.1.165 is a reliability release.

Sources checked

Affected pages

Recommended action

For legal workflows, log inline moderation results without storing sensitive prompt text, keep attorney review for legal conclusions, pin Claude Code versions through managed settings, audit enabled plugins with `/plugin list`, and retest hook/MCP behavior before unattended client-data work.

site
Approved
Jun 3, 2026

Codex Sites and Claude workflow identity controls

OpenAI's June 2 Codex changelog adds Sites preview in the Codex app, iOS Codex controls for Face ID or passcode lock, Queue versus Steer follow-up defaults, Windows SSH connections, `/side <prompt>`, and host/task reliability fixes. The OpenAI API changelog also moves eligible container sessions to per-minute billing with a five-minute minimum, while an allowlisted Claude Code Action commit adds workload identity federation inputs to the base action and requires GitHub OIDC write permission for OIDC token exchange.

Sources checked

Affected pages

Recommended action

For legal workflows, review hosted-site scope, environment variables and secrets, mobile device policy, Windows SSH trust, container-session cost controls, GitHub OIDC permissions, federation rule ownership, and static credential fallback before using Codex Sites or Claude Actions on client-data systems.

openai
Approved
May 20, 2026

Codex 0.132.0 and Secure MCP Tunnel controls

OpenAI's Codex 0.132.0 changelog adds Python SDK authentication, simpler text-only turn APIs, structured output support for resumed exec sessions, standard Codex auth for remote executors, and app-server image-fidelity preservation; the OpenAI API changelog also introduced Secure MCP Tunnel for account-led enterprise access to private MCP servers.

Sources checked

Affected pages

Recommended action

For legal automation, re-check SDK auth storage, resumed-session schemas, remote-executor identity, private MCP tunnel ownership, and human review before connecting privileged repositories or client-data systems.

site
Approved
May 19, 2026

Codex and Claude agent operations refreshed

Codex CLI 0.131.0 adds richer TUI controls, unified file/plugin/skill mentions, plugin marketplace commands, remote-control support, the `openai-codex` Python SDK package, and `codex doctor`; Claude Code 2.1.144 adds background-session resume support and fixes plugin, MCP, headless, remote-login, and background-agent reliability issues.

Sources checked

Affected pages

Recommended action

For legal repositories, pin and test agent CLI versions before rollout; verify plugin dependency chains, MCP pagination/tool lists, remote-login policy, background-session isolation, Python SDK package names, and diagnostic output before unattended or client-data workflows.

site
Approved
May 16, 2026

Remote Codex and Claude agent controls for legal workflows

OpenAI's Codex changelog adds mobile remote access through a connected Mac plus hooks, access-token, and enterprise setup guidance, while Claude Code 2.1.143 tightens plugin, worktree, hook, background-session, and Windows behavior.

Sources checked

Affected pages

Recommended action

Before remote or background legal-agent work, confirm the trusted host, token scope, plugin dependency chain, worktree isolation mode, MCP settings, hook stop policy, and human review gate.

github
Approved
May 15, 2026

Repository-agent pull request instructions need explicit scoping

Codex Action now calls PR-controlled project instruction files untrusted input, while Claude Code Action tightened tag-mode scoping so only the trigger comment or issue body acts as instructions.

Sources checked

Affected pages

Recommended action

In legal repository-agent workflows, treat PR bodies, comments, commits, screenshots, and checked-out instruction files as evidence context unless the trusted trigger explicitly authorizes a change; keep checkout credentials non-persistent and require human merge review.

claude
Approved
May 14, 2026

Claude Code 2.1.141 hook, plugin, and agent controls

Claude Code 2.1.141 adds hook terminal-sequence output, HTTPS plugin cloning, workspace-scoped federation, directory-scoped agent listing, recent-session feedback bundles, and background-agent permission fixes.

Sources checked

Affected pages

Recommended action

For legal workflows, retest hooks that notify or title terminals, prefer HTTPS plugin installs where SSH keys are unavailable, scope agent audits with `claude agents --cwd`, and confirm background agents keep the intended permission mode.

claude
Approved
May 12, 2026

Claude Code 2.1.139 updates agent, hook, and MCP controls

Claude Code 2.1.139 adds agent view, `/goal`, direct hook argument execution, PostToolUse continuation, MCP project-directory environment support, and subagent telemetry headers.

Sources checked

Affected pages

Recommended action

Before using Claude Code on client or privileged workflows, retest hooks, MCP configs, and goal-driven sessions in a sandbox with audit logging and human review.

openai
Approved
May 12, 2026

Codex Auto-review and repair-loop guidance for legal repositories

OpenAI expanded Codex Auto-review documentation and published Codex cookbook examples for iterative repair and agent-improvement loops using traces and evals.

Sources checked

Affected pages

Recommended action

Treat Auto-review as an additional approval signal, not legal sign-off; keep sandbox boundaries, eval criteria, source checks, and human diff review explicit.

github
Approved
May 10, 2026

GitHub MCP and Agentic Workflows backfill for legal repository agents

GitHub's MCP Server gained Projects tooling, HTTP server mode, and permission-aware tool filtering, while Agentic Workflows entered technical preview for AI agents inside GitHub Actions.

Sources checked

Affected pages

Recommended action

For legal repository agents, require repository secrets, least-necessary workflow permissions, explicit MCP tool allowlists, and human merge review before production changes.

github
Approved
May 10, 2026

GitHub MCP secret scanning controls for legal repository agents

GitHub MCP Server secret scanning is generally available for repositories with GitHub Secret Protection, giving MCP-compatible agents and IDEs a pre-commit and pre-PR credential check.

Sources checked

Affected pages

Recommended action

Before agent-authored legal repository changes, keep push protection enabled, scan for secrets through approved MCP-compatible tooling, and require human review before merge.

site
Approved
May 10, 2026

MCP research workflows now require source-coverage checks

Research guidance now separates model knowledge from current source access and requires jurisdiction, date, treatment, and MCP tool-scope checks before legal reliance.

Sources checked

Affected pages

Recommended action

For current-law research, confirm the connected source set, jurisdiction/date coverage, treatment/status data, and tool allowlist before drafting conclusions.

openai
Approved
May 9, 2026

OpenAI model, plan, and Responses API documentation refresh

OpenAI docs now emphasize current GPT-5.5/GPT-5.4-era model guidance, updated ChatGPT plan naming, and Responses API plus built-in tools as the starting point for new API workflows.

Sources checked

Affected pages

Recommended action

For legal workflows, avoid stale GPT-4 or fixed-price plan advice; verify the current model, plan, tool, retention, and review controls before piloting client-facing automation.

claude
Approved
May 8, 2026

Claude Code 2.1.133 automation reliability changes

Claude Code added worktree base controls, effort-aware hooks, managed sandbox settings, and fixes for MCP OAuth, subagent skill discovery, and concurrent sessions.

Sources checked

Affected pages

Recommended action

For legal automation agents, pin worktree behavior deliberately and retest hooks, MCP auth, and subagent skill discovery before production runs.

openai
Approved
May 8, 2026

Codex app automation backfill for legal workflows

Codex docs now emphasize recurring app automations, linked-repo worktrees, browser permissions, subagents, plugins, and CLI sandbox or approval profile controls.

Sources checked

Affected pages

Recommended action

Before running unattended legal agents, pin sandbox and approval settings, keep source allowlists explicit, and route Codex automation changes through reviewable PRs.

openai
Approved
May 8, 2026

OpenAI Realtime and Codex plugin refresh

OpenAI released Realtime 2, streaming translation and transcription updates, and the OpenAI Developers plugin for Codex.

Sources checked

Affected pages

Recommended action

For legal intake or multilingual voice workflows, verify realtime model and API guidance before piloting client-facing automations.

claude
Approved
May 7, 2026

Claude Code automation patterns for legal content workflows

Claude Code GitHub Actions supports scheduled and event-driven coding workflows, including skills and prompt-driven automation that can help maintain tutorial quality.

Sources checked

Affected pages

Recommended action

Keep Claude tutorials aligned with current GitHub Action and skill behavior before translation waves run.

openai
Approved
May 7, 2026

Daily Codex automation loop for legal AI tutorials

We are adding a source-backed automation workflow that researches Codex and Claude changes, proposes tutorial updates, and hands approved changes to translation agents.

Sources checked

Affected pages

Recommended action

Use the updates page to track what changed, which sources were checked, and which tutorials need refresh work.