diff --git a/codex-rs/cli/src/debug_sandbox.rs b/codex-rs/cli/src/debug_sandbox.rs
index 8d3b702a7d..f23b66c10d 100644
--- a/codex-rs/cli/src/debug_sandbox.rs
+++ b/codex-rs/cli/src/debug_sandbox.rs
@@ -149,7 +149,7 @@ async fn run_command_under_sandbox(
     if let Some(reason) = codex_shell_command::preserved_path_write_forbidden_reason(
         &command,
         cwd.as_path(),
-        &config.permissions.file_system_sandbox_policy,
+        &config.permissions.file_system_sandbox_policy(),
     ) {
         anyhow::bail!("{reason}");
     }
diff --git a/codex-rs/core/src/tools/handlers/shell.rs b/codex-rs/core/src/tools/handlers/shell.rs
index becce37435..78ff1ddb6c 100644
--- a/codex-rs/core/src/tools/handlers/shell.rs
+++ b/codex-rs/core/src/tools/handlers/shell.rs
@@ -534,7 +534,7 @@ impl ShellHandler {
         let exec_approval_requirement = codex_shell_command::preserved_path_write_forbidden_reason(
             &exec_params.command,
             &exec_params.cwd,
-            &turn.file_system_sandbox_policy,
+            &file_system_sandbox_policy,
         )
         .map_or(exec_approval_requirement, |reason| {
             crate::tools::sandboxing::ExecApprovalRequirement::Forbidden { reason }
diff --git a/codex-rs/tui/src/app_server_session.rs b/codex-rs/tui/src/app_server_session.rs
index 57afc558e0..dd330c819d 100644
--- a/codex-rs/tui/src/app_server_session.rs
+++ b/codex-rs/tui/src/app_server_session.rs
@@ -1132,7 +1132,9 @@ fn permission_profile_override_from_config(
     }
 
     if matches!(
-        config.permissions.sandbox_policy.get(),
+        config
+            .permissions
+            .legacy_sandbox_policy(config.cwd.as_path()),
         SandboxPolicy::ExternalSandbox { .. }
     ) {
         None