diff --git a/codex-rs/app-server/src/bespoke_event_handling.rs b/codex-rs/app-server/src/bespoke_event_handling.rs
index 01eb4bd578..f883d078e4 100644
--- a/codex-rs/app-server/src/bespoke_event_handling.rs
+++ b/codex-rs/app-server/src/bespoke_event_handling.rs
@@ -2948,7 +2948,7 @@ mod tests {
                     id: event_turn_id,
                     msg: EventMsg::GuardianAssessment(assessment),
                 },
-                self.conversation_id.clone(),
+                self.conversation_id,
                 self.conversation.clone(),
                 self.thread_manager.clone(),
                 self.outgoing.clone(),
diff --git a/codex-rs/linux-sandbox/tests/suite/landlock.rs b/codex-rs/linux-sandbox/tests/suite/landlock.rs
index 132ea465d7..b23002d9a3 100644
--- a/codex-rs/linux-sandbox/tests/suite/landlock.rs
+++ b/codex-rs/linux-sandbox/tests/suite/landlock.rs
@@ -311,13 +311,14 @@ async fn bwrap_dev_nodes_work_when_workspace_dot_codex_is_missing() {
     }
 
     let tmpdir = tempfile::tempdir().expect("tempdir");
+    let writable_roots = vec![tmpdir.path().to_path_buf()];
     let output = run_cmd_result_with_writable_roots_in_cwd(
         &[
             "bash",
             "-lc",
             ": >/dev/null && head -c 8 /dev/zero | od -An -tx1",
         ],
-        &[],
+        &writable_roots,
         tmpdir.path(),
         LONG_TIMEOUT_MS,
         /*use_legacy_landlock*/ false,