Working alpha · September 2026

Privacy & limitations

The public sample

The sample uses bundled, fictional task fixtures in your browser. It does not connect to Codex, call the shared alpha MCP service, create a real task, or ask for an account. We have added no analytics, advertising, cookies, or feedback form to this site.

GitHub Pages serves the site and may process ordinary request information under GitHub’s privacy statement. Following an external link takes you to that service’s own policies.

Your own live setup

Visual Team is designed to record task metadata: sanitized titles and summaries, worker roles, lifecycle event types, times, reported phases and results, and artifact references. Native hook payloads use an allowlist; prompts, transcripts, command text, and code content are outside that allowlist. Private capability tokens belong in private tool metadata.

Keep sensitive information out of every title, label, summary, and artifact reference you supply. These are free text. The “private” mode label does not add authentication, stronger isolation, or different retention in this alpha.

The alpha server stores task data in memory, normally expiring it after about two hours. Restarting the server loses its tasks. Host conversation records and hosting request logs are separate and follow their own retention policies. Read the technical privacy notes before connecting a live setup.

Current limits

• The tested live path is ChatGPT web plus Windows Codex CLI 0.154.0-alpha.6.2. Later versions require separate checks.
• Use one private, disposable workflow per alpha deployment. There is no account system, authentication, or multi-user service here.
• The board records status. It cannot approve, deny, rewrite, or block Codex actions.
• Missing native hooks leave model-reported status; they do not become observed evidence.
• Technical acceptance is documented. A human usefulness study and repeat-use follow-up are still pending.

Feedback and security

Use GitHub issues for non-sensitive questions and feedback. For security matters, use the private security advisory form. Do not publish credentials, private capabilities, or real task content in an issue.

The source is available under Apache-2.0, including its warranty terms. This is an independent open-source project, not an OpenAI endorsement or directory approval.