diff --git a/codex-rs/cli/src/debug_sandbox.rs b/codex-rs/cli/src/debug_sandbox.rs
index d85e8dca90..fdc37c4192 100644
--- a/codex-rs/cli/src/debug_sandbox.rs
+++ b/codex-rs/cli/src/debug_sandbox.rs
@@ -297,6 +297,7 @@ impl SandboxRuntimeConfig {
         self.permission_profile.network_sandbox_policy()
     }
 
+    #[cfg(target_os = "windows")]
     fn legacy_sandbox_policy(
         &self,
         sandbox_policy_cwd: &AbsolutePathBuf,