fix(#4770): lift the Codex sandbox_mode holds — documented enforcement suffices (#4920)

* fix(#4770): lift the Codex sandbox_mode holds — documented enforcement suffices

* docs(#4770): backfill the changeset PR number

---------

Co-authored-by: sim <sim@local>
This commit is contained in:
Tom Boucher
2026-09-21 15:30:52 -04:00
committed by GitHub
parent 6a4984cf69
commit 585cab41cc
7 changed files with 142 additions and 100 deletions

View File

@@ -0,0 +1,5 @@
---
type: Fixed
pr: 4920
---
**Codex agents with Write/Edit tool contracts now run under workspace-write** — the 17-role read-only hold is lifted: official OpenAI documentation establishes sandbox_mode as an enforced boundary, so each Codex agent's sandbox now derives purely from its own declared tools. (#4770)