Record normalized sandbox violation events - #36207
Merged
copyberry[bot] merged 1 commit intoJul 30, 2026
Merged
Conversation
## Why Filesystem denials and managed-network blocks did not share a structured event shape, requiring downstream consumers to rediscover enforcement paths and parse backend-specific output. See #17573. ## What changed - Add normalized filesystem and network violation types in `codex-sandboxing` and emit them through a shared tracing seam. - Classify filesystem denials by backend and reason, retaining an optional path and bounded output snippet, and preserve managed-network block context. - Report the sandbox type through exec-server responses so unified exec can classify remote denials without guessing; omitted values remain compatible with older peers. - Record violations from exec, apply-patch, shell-escalation, unified-exec, and managed-network enforcement paths without changing denial behavior. ## Testing - Cover filesystem classification, path extraction, `SIGSYS`, network event conversion, protocol compatibility, and remote sandbox-type propagation. GitOrigin-RevId: d673173b4fa6bdf0a24421194a8a61c81fab9c96
copyberry
Bot
force-pushed
the
copyberry/codex-internal-to-codex-oss/d673173b4fa6bdf0a24421194a8a61c81fab9c96
branch
from
July 30, 2026 19:24
55c9082 to
0042b00
Compare
copyberry
Bot
deleted the
copyberry/codex-internal-to-codex-oss/d673173b4fa6bdf0a24421194a8a61c81fab9c96
branch
July 30, 2026 19:25
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Record normalized sandbox violation events
Why
Filesystem denials and managed-network blocks did not share a structured event
shape, requiring downstream consumers to rediscover enforcement paths and parse
backend-specific output. See #17573.
What changed
codex-sandboxingand emit them through a shared tracing seam.
and bounded output snippet, and preserve managed-network block context.
classify remote denials without guessing; omitted values remain compatible
with older peers.
managed-network enforcement paths without changing denial behavior.
Testing
SIGSYS, network eventconversion, protocol compatibility, and remote sandbox-type propagation.