diff --git a/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md b/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md
index d9b6f26853..65d282ee65 100644
--- a/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md
+++ b/codex-rs/prompts/templates/permissions/sandbox_mode/danger_full_access.md
@@ -1 +1 @@
-Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is {{network_access}}.
+Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is {{ network_access }}.
diff --git a/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md b/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md
index a221124ea8..a43320ae56 100644
--- a/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md
+++ b/codex-rs/prompts/templates/permissions/sandbox_mode/read_only.md
@@ -1 +1 @@
-Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `read-only`: The sandbox only permits reading files. Network access is {{network_access}}.
+Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `read-only`: The sandbox only permits reading files. Network access is {{ network_access }}.
diff --git a/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md b/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md
index 0732a998e8..5d75aaffbe 100644
--- a/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md
+++ b/codex-rs/prompts/templates/permissions/sandbox_mode/workspace_write.md
@@ -1 +1 @@
-Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `workspace-write`: The sandbox permits reading files, and editing files in `cwd` and `writable_roots`. Editing files in other directories requires approval. Network access is {{network_access}}.
+Filesystem sandboxing defines which files can be read or written. `sandbox_mode` is `workspace-write`: The sandbox permits reading files, and editing files in `cwd` and `writable_roots`. Editing files in other directories requires approval. Network access is {{ network_access }}.