Codex adds opt-in registered package execution to its Windows sandbox and honors Unix socket grants on Linux

GitHub·medium signalXBlueskyLinkedInCopy link

The same alpha.4 to alpha.6 range adds service-managed package registration for Windows sandbox accounts (#45542), opt-in registered package execution (#45550), registration refresh that resumes after service restarts (#45559), MXC TTY launches and managed networking in the exec server (#45524), plus "Honor explicit Unix socket grants in the Linux managed sandbox" (#45534) and prepared Unix socket permissions in Seatbelt (#45548). Codex's sandbox work is now split three ways by host OS, and none of it appears in a release note.