iceweasel-oai cba716c0f1 Run sandbox integrity checks before commands and filesystem operations (#51843) ...

## What changed

Wire existing sandbox integrity checks into local command preparation, exec-server process preparation, and sandboxed filesystem helper and file-open operations. Make execution request preparation asynchronous so callers can await the checks.

The checks remain observational: failures and timeouts do not prevent command execution.

## Testing

Add regression tests that launch a real command after checker preparation fails or exceeds its timeout, verifying successful output and exit status.

GitOrigin-RevId: a82399f8aeb8b08f9965e6121b4c7f460552af3f

2026-10-07 21:52:43 +00:00

..

add_dir.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

agents_md.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

apply_patch.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

approval_policy.rs

Add an --approve-for-me CLI flag (#36373)

2026-07-31 18:26:04 +00:00

auth_env.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

completion_backfill_tests.rs

Backfill completion items only for the active exec turn (#34226)

2026-07-19 20:36:18 +00:00

cyber_access_program_tests.rs

Add per-turn Cyber access program selection to exec and the SDK (#49939)

2026-10-01 08:57:53 +00:00

daybreak.rs

Gate CLI Daybreak controls and selection behind an opt-in feature (#51207)

2026-10-06 00:16:44 +00:00

ephemeral.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

hooks.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

mcp_required_exit.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

mod.rs

Add per-turn Cyber access program selection to exec and the SDK (#49939)

2026-10-01 08:57:53 +00:00

originator.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

output_schema.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

prompt_stdin.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

resume.rs

Set explicit turn triggers for exec and TUI requests (#46569)

2026-09-19 01:58:19 +00:00

sandbox.rs

Run sandbox integrity checks before commands and filesystem operations (#51843)

2026-10-07 21:52:43 +00:00

seatbelt.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

server_error_exit.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

worktree.rs

Enable worktrees by default and clarify local daemon errors (#44870)

2026-09-11 17:08:59 +00:00