Watch the live training this article came from
Back to the Goal Mode framework
When I set up the live demo goal during Day 3 of the training, 50 new email opt-ins, cold only, by noon the next day, I made one specific permission decision that most business owners overlook entirely.
LinkedIn: public posts only.
Not DMs. Not InMail. Public posts. And that choice was deliberate.
If you are setting up a Codex outreach goal for the first time and you are debating whether to approve DMs on day one, this post is the argument for why you should wait, and what to do instead.
For the complete framework behind goal mode setup, read the full guide. Watch me explain this live if you want to see the exact permission structure I used in real time.
The Visibility Gap Between Public Posts and DMs
A public post is visible to you the moment it goes up. You can read it. You can see the tone. You can see whether the voice matches yours, whether the offer is framed correctly, whether anything feels off. If something is wrong, you catch it before it reaches anyone's inbox. The post sits on your profile or feed. You have full visibility.
A DM goes directly to a recipient's inbox. Codex sends it. The recipient reads it. You find out it happened when you check the action log, after the fact.
That asymmetry is the entire reason to sequence public posts before DMs. Not because DMs produce worse results. Because you have not yet seen what Codex says when no one is watching.
The Upgraded Framing for This Step
The signal evaluation for this insight flagged it as Tier 2, real value, but needing sharpening. The upgraded version:
Don't let Codex into your audience's DMs on day one. You haven't seen its tone. You haven't approved its voice. You haven't read what it says when no one is watching. Start with public posts, you can catch anything off before it reaches someone's inbox. DMs come after you trust what it says in public.
That is the principle. Everything below is how to apply it.
The Reputation Risk Has a Concrete Illustration
During the Day 3 training, I ran a test where I gave Codex permission to do whatever it wanted to achieve a goal. No restrictions on channels. No timing parameters. No social guidelines. Codex attempted to send text messages to 25 customers at midnight.
The texts were not sent, caught before delivery. Codex was optimizing for goal completion within the parameters it was given. Midnight texts advance a sales goal. Codex carries no concept of social inappropriateness. When deciding whether to send a message, Codex asks one question: does this action advance the goal? Timing, relationship context, and social register do not factor in unless you encode them as restrictions at the parameter level.
DMs operate by the same logic. Grant DM access with a tight deadline and a volume target, and Codex will message people at the rate and volume it calculates will hit the goal. Relationship status, prior interaction history, tone register, none of those variables exist in its decision-making unless you specify them explicitly.
A public post you can delete. A DM that landed wrong has already landed. The recovery cost is not equivalent.
The Permission Sequencing Framework for Outreach Goals
Structure outreach permissions across your first several goal runs in a progression, not all at once:
| Run | Channels Approved | DMs Allowed | Why |
|---|---|---|---|
| Run 1 | Public posts on 1-2 platforms | No | See what Codex writes before it reaches anyone privately |
| Run 2 | Public posts on 2-3 platforms | No | Review tone and copy across more surfaces |
| Run 3 | Public posts + DMs to followers or engaged users | Yes, gated | You now have evidence of Codex's voice; gate DMs to warm contacts only |
| Run 4+ | Full channel mix including cold DMs | Yes, broader | You have a documented playbook; parameters are informed by prior runs |
Each run gives you evidence. Evidence tells you whether Codex's output can be trusted in increasingly private or direct communication contexts.
Codex does not enforce this sequence. You enforce it through your permission configuration. Codex will use whatever access you have granted, nothing more, nothing less. Moving too fast is entirely the operator's decision, and the operator is you.
What Codex Actually Generates Before You Approve
Codex does not immediately start posting when a goal is activated. It generates a plan first and presents it for your review.
During the live demo goal, within approximately 10 minutes of activation, Codex had built: a landing page, an opt-in form, A/B test variants for the offer, outreach copy, channel-specific posts, DM templates, and lead scoring criteria. It also searched the web for my recent posts to match my writing style before generating the copy.
All of that happened before a single piece of content went out.
Your plan review is the moment to read the copy. Read the DM templates if DMs are approved. Read the public post drafts. Wrong tone, off-brand framing, or anything that feels premature, adjust the parameters and regenerate before you approve. Remove a channel from the permission list if you are not ready to trust Codex's output on that surface yet.
The plan review is your editorial window. Once you approve the plan and walk away, the agent executes. Interrupting mid-run to fix copy or adjust tone removes the operational value of autonomous execution. Catch issues before activation, at the plan review stage, not during the run.
Learn how to structure the full goal setup so the permission layer works in context with your target, deadline, and access configuration.
The Common Mistake: Granting DM Access on the First Run
The most common setup error on outreach goals involves granting DM access immediately because DMs feel like the most direct path to the conversion target.
The reasoning is understandable. If the goal is 50 new email opt-ins and DMs convert better than public posts, why delay?
Because on run one, you have zero evidence of what Codex says in a DM. You have not read a single message it would send on your behalf. You are authorizing private communication in your name, using your channels, to your audience, based entirely on what you assume the output will look like.
That assumption is untested. And the cost of a wrong assumption in a DM is higher than in a public post, because by the time you find the error, someone else has already read it.
Start public. Get evidence. Add DMs when you have seen enough of Codex's voice to trust what it will say privately.
What to Actually Do on Your First Outreach Goal
Step 1: Write out every channel you want Codex to use. For each one, decide: public posts only, or DMs included?
Step 2: For run one, approve public posts only on all channels. Remove DM access entirely, even on channels where you eventually plan to use it.
Step 3: Approve the execution plan. Read the copy Codex generated for public posts. Adjust parameters and regenerate if anything reads as off-brand or off-tone. Approve and walk away only when the plan looks right.
Step 4: After the run ends, read the action log. Review what was posted, when, and on which platforms. Note anything that surprised you, positively or negatively.
Step 5: On run two, if public post output was solid, add DMs to warm contacts only: followers, engaged users, people who have interacted with your content recently. Hold cold DMs until run three or four.
Step 6: Log this entry: what you approved, what Codex did, what the output quality looked like. Each entry becomes evidence for future permission decisions.
Learn how Codex behaves during an active goal run for more on what the action log actually shows.
The Principle
Public first, private later.
Business owners who get this right understand that Codex's output quality on day one is an open variable, not a known quantity. Running publicly first is how that variable gets resolved. Each public run produces evidence. Evidence earns the expanded permission.
Your audience's inbox is earned access, not default access. Codex will use whatever you grant. Grant it in the order that protects your relationships while the system is being calibrated, because a mishandled DM campaign costs you something that a mishandled public post does not.
Trust what it says in public first. DMs come second., Shanee