Codex spends six of its last thirty hours of commits wiring a native Windows MXC sandbox into command execution

GitHub·medium signalXBlueskyLinkedInCopy link

openai/codex merged #45176, #45178, #45169 and #45182 on 2026-09-12, adding explicit MXC backend selection, carrying its identity through exec-server process reporting and sandbox violation classification, and launching MXC through the Codex executable with the effective permission profile. The backend refuses exec-server requests that ask for a TTY, an `arg0` override, managed networking, or private desktop isolation, and refuses outright when native MXC is unavailable. #45182 separately hardened logon SID lookup, which previously walked token group entries and SID pointers without checking they fit inside the returned buffer.