Advanced Codex users. We shipped a replacement to coarse sandbox modes： reusable， inheritable permission profiles binding OS-enforced file read/write/deny rules （even **/*.env） to per-domain network + Unix sockets. Plus fail-closed admin allowlists. Least privilege per task.

https://developers.openai.com/codex/permissions