Adam Perry @ OpenAI 8444cf63b5 Derive sandbox contexts from turn environments (#40551) ...

## What changed

- Add Windows sandbox mode, private-desktop behavior, and legacy Landlock selection to each `EnvironmentConfig`.
- Centralize sandbox context construction on `TurnEnvironment`, preserving environment-owned permissions, paths, and backend settings while applying additional permission grants.
- Use the environment-derived context for project instructions, capability discovery, file uploads, and filesystem-oriented tools.

## Testing

- Verify capability discovery uses the selected environment's permission profile and sandbox backends when they differ from the thread defaults.

GitOrigin-RevId: 7ae2fed90c8ada950f2e8431e571e9b2c793c291

2026-08-25 05:16:45 +00:00

..

src

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

BUILD.bazel

Restrict macOS preference reads to full-disk policies (#39811)

2026-08-20 23:18:55 +00:00

Cargo.toml

Support Windows sandboxing in the exec server (#34423)

2026-07-20 22:35:14 +00:00