I use it in a devcontainer. Protects me from most agent stupidity, though not malice. I give it read-only access to git origin and relevant AWS infra, so any remote changes are made by me from the host (manually or scripted), but it is still able to quickly get feedback on changes and look at logs.

I've been testing these models with fireworks.ai

They provide serverless access, and if you use fireconnect it's also easy to hook the models up to e.g. codex which allows for fairly clean comparisons

I think they provide the bare model (no filter) but I might be wrong, haven't tried using it for security research yet

Have you been able to find information on which languages are explicitly supported by this API? I'm having a hard time finding that out.

Yes and many forms of electricity generation evaporate water as well

I also noticed this on 2 accounts - did not take as careful notes as you did unfortunately. But I'm fairly confident - both of these are accounts where I care about the interactions not being used for training.

What's kind of still an open question for me is if the toggle automatically also applies to my Codex CLI use on the same account, or if that data is still silently being used in some way.

After this happened, I deleted all my ChatGPT history (even though I'm not sure how much it helps at this point), but for Codex I still haven't really found any way to do the same, I can still load my past sessions even after archiving them.