mirror of
https://github.com/openai/codex.git
synced 2026-08-23 13:09:46 +00:00
## What changed Add macOS-only integration coverage that runs commands under the production Seatbelt policy and verifies: - deny globs protect matching files, directory ancestors, symlink aliases, and paths created after policy application; - protected directories cannot be moved, replaced, or exchanged across writable roots; and - standard read-only and workspace-write profiles continue to allow expected filesystem operations. GitOrigin-RevId: 1f666835ee402bedd1d32e87f1082eaaf7b7bf6a