Vibe Coding
Codex hardens Windows sandboxing: private desktops for legacy sandboxes, package identity preserved for descendants
Two commits in the same alpha window tighten the Windows side of Codex's sandbox: #46554 always uses private desktops for legacy Windows sandboxes, and #46575 preserves Windows package identity for sandboxed descendant processes. Private desktops block the shatter-style cross-window messaging path that lets a sandboxed process drive a UI outside its boundary; preserving package identity keeps child processes from silently dropping out of the AppContainer restrictions their parent was given. This follows the macOS Seatbelt tightening in the same release line and shows both sandbox backends are being audited at once.
Source
↳ Follow the thread