tldr: Codex published a user’s .env file to Cloudflare Pages. Someone took the Google API key and ran fable-5.1-max swarms while the user slept, which caused an $88,982.85 bill. Opus 5.5 found the cause; Codex could not find it, did not explain, and flagged the chat as a cybersecurity risk.
Conclusion: Never let an agent deploy without a check of what goes into the build output. Keep secrets out of deploy folders, and set budget limits and key restrictions on every cloud API key.