Auditors found that 10 percent of internal Codex traffic went unmonitored between May and July 2026 due to a system gap in handling compaction context summaries