From 699b216422c515beeada832c8f632e72fca7af2f Mon Sep 17 00:00:00 2001
From: iceweasel-oai <iceweasel@openai.com>
Date: Fri, 3 Jul 2026 00:22:06 -0700
Subject: [PATCH] Avoid proxy env capture for preserved fs sandbox setup

---
 codex-rs/windows-sandbox-rs/src/lib.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/codex-rs/windows-sandbox-rs/src/lib.rs b/codex-rs/windows-sandbox-rs/src/lib.rs
index 2a394f11ff..f8a3694d16 100644
--- a/codex-rs/windows-sandbox-rs/src/lib.rs
+++ b/codex-rs/windows-sandbox-rs/src/lib.rs
@@ -37,6 +37,9 @@ impl fmt::Debug for WindowsSandboxCancellationToken {
 
 /// Controls whether a Windows sandbox launch reconciles persistent proxy
 /// firewall settings or preserves the settings established by another launch.
+///
+/// `Preserve` is used by filesystem-only helper launches that should never
+/// introduce new proxy/firewall state of their own.
 #[derive(Clone, Copy, Debug, Default, PartialEq, Eq)]
 pub enum WindowsSandboxProxySettingsMode {
     #[default]