diff --git a/codex-rs/core/src/exec_policy/model_policy_tests.rs b/codex-rs/core/src/exec_policy/model_policy_tests.rs
index 9541513435..b094db40e5 100644
--- a/codex-rs/core/src/exec_policy/model_policy_tests.rs
+++ b/codex-rs/core/src/exec_policy/model_policy_tests.rs
@@ -174,7 +174,7 @@ async fn cyber_policy_keeps_heuristically_safe_commands_inside_the_sandbox() {
             approval_policy: AskForApproval::OnRequest,
             permission_profile: PermissionProfile::read_only(),
             environment_policy: None,
-            windows_sandbox_level: WindowsSandboxLevel::Disabled,
+            windows_sandbox_level: WindowsSandboxLevel::RestrictedToken,
             sandbox_permissions: SandboxPermissions::UseDefault,
             prefix_rule: None,
             allow_prefix_rules: AllowPrefixRules::IgnoreForCyberModel,
@@ -194,7 +194,7 @@ async fn cyber_policy_keeps_heuristically_safe_commands_inside_the_sandbox() {
             approval_policy: AskForApproval::OnRequest,
             permission_profile: PermissionProfile::read_only(),
             environment_policy: None,
-            windows_sandbox_level: WindowsSandboxLevel::Disabled,
+            windows_sandbox_level: WindowsSandboxLevel::RestrictedToken,
             sandbox_permissions: SandboxPermissions::UseDefault,
             prefix_rule: None,
             allow_prefix_rules: AllowPrefixRules::Honor,