From 5e645c6da7a106eca9298388de0b08969fe434e4 Mon Sep 17 00:00:00 2001
From: viyatb-oai <viyatb@openai.com>
Date: Fri, 20 Feb 2026 15:44:13 -0800
Subject: [PATCH] fix(sandbox-summary): ignore deny_read_paths in workspace
 write summary

---
 codex-rs/utils/sandbox-summary/src/sandbox_summary.rs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/codex-rs/utils/sandbox-summary/src/sandbox_summary.rs b/codex-rs/utils/sandbox-summary/src/sandbox_summary.rs
index 53851d86b7..cb1a3cb1a8 100644
--- a/codex-rs/utils/sandbox-summary/src/sandbox_summary.rs
+++ b/codex-rs/utils/sandbox-summary/src/sandbox_summary.rs
@@ -18,6 +18,7 @@ pub fn summarize_sandbox_policy(sandbox_policy: &SandboxPolicy) -> String {
             exclude_tmpdir_env_var,
             exclude_slash_tmp,
             read_only_access: _,
+            deny_read_paths: _,
         } => {
             let mut summary = "workspace-write".to_string();
 
@@ -73,6 +74,7 @@ mod tests {
         let summary = summarize_sandbox_policy(&SandboxPolicy::WorkspaceWrite {
             writable_roots: vec![writable_root.clone()],
             read_only_access: Default::default(),
+            deny_read_paths: vec![],
             network_access: true,
             exclude_tmpdir_env_var: true,
             exclude_slash_tmp: true,