Skip to content

fix: preserve codex sandbox denials and bound fd credential reads - #24

Merged
apresmoi merged 2 commits into
mainfrom
fix/codex-overlapping-denials
Sep 18, 2026
Merged

apresmoi merged 2 commits into
mainfrom
fix/codex-overlapping-denials

Conversation

@apresmoi

Copy link
Copy Markdown
Collaborator

Summary

  • Preserve effective Codex sandbox denials when rules overlap, and export the organization Codex sandbox projection used by Paideia's native adapter.
  • Validate and bound credential reads from file descriptors.

Already consumed by Paideia's daimon-native adapter via local link; this lands it on main so Grok broker work can stack on it.

Tests

  • Targeted: 41 tests, 36 pass, 5 Linux-only skipped locally; typecheck clean.

🤖 Generated with Claude Code

@apresmoi
apresmoi merged commit 43fe48c into main Sep 18, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant