Source: https://code.claude.com/docs/en/changelog (2.1.318, 2026-11-04); Codex releases https://github.com/openai/codex/releases and https://dev.to/aicoding-guide/codex-cli-v0166-adds-codex-queue-resume-and-codex-doctor-network-only-5ae0. Transferable defect classes, each checked against yoyo v0.4.0 at 0375d32f:

1. CA bundle: CC now uses the readable certificates when NODE_EXTRA_CA_CERTS is empty, not PEM, or starts with a damaged cert, and warns on stderr. yoyo (tls_preflight, #1138): an empty SSL_CERT_FILE stops at startup with a named reason (exit 1). A file whose first cert is garbage followed by a valid bundle reached the API (got a 401 on a bogus key), so the readable certs are used. Probed. Upstream yoagent panic half still open.
2. -p success after an API error cut off a reply (CC fixed, mod turn.step). yoyo -p with a bogus key exits 1. A cut mid-stream was not probed.
3. Slash commands that fail printing nothing in -p (CC fixed). yoyo class: #1137/#1128 (exit codes, REPL wording in -p).
4. Stdio MCP servers that exit on the version probe get re-probed every start; CC pins them to a legacy handshake for 7 days. yoyo spawns every stdio server twice (pre-flight plus connect), measured and unfiled (CLAUDE.md MCP section).
5. MCP tool called before it loads now returns its input schema; Claude is told when an approved connector tool becomes unavailable after a restart. yoyo class: #1134 (dead server, the missing-tool premise is unmeasured).
6. A shell command approved after a restart ran in the start folder, not the folder it was asked in. The anchor class (cwd at time of use), relevant to yoyo nested_instructions root resolution, which is untested.
7. Codex 0.164: masks credentials in remote bash. yoyo #1064 (opt-in env scrub; owner split by population).
8. Codex: the GPT-6.1 Sol AGENTS.md compliance regression; Terra recommended. yoyo has gpt-6.1-sol and gpt-6.1-terra presets (agent_builder.rs:826).
9. Codex 0.166: codex queue --resume (async session queue), codex doctor --network-only. yoyo has doctor; it has no network-only narrowing and no queued session resume.