viyatb-oai c69f7f6f37 feat(sandbox): add Windows deny-read parity ...

Add Windows deny-read enforcement for split filesystem policies by resolving exact and glob unreadable entries into ACL targets, threading those paths through the restricted-token and elevated Windows sandbox backends, and applying deny-read ACE overlays with stale cleanup records.

Exact missing paths are materialized before ACE application so sandboxed subprocesses cannot create and read them during the same run. Existing paths are planned with both lexical and canonical targets to cover reparse-point aliases.

Co-authored-by: Codex <noreply@openai.com>

2026-05-08 10:09:47 -07:00

..

common

Add CODEX_HOME environments TOML provider (#20666)

2026-05-08 01:37:47 +00:00

fixtures

Update tests to stop using sse_completed fixture (#10638)

2026-02-04 08:38:06 -08:00

suite

feat(sandbox): add Windows deny-read parity

2026-05-08 10:09:47 -07:00

all.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

cli_responses_fixture.sse

…

responses_headers.rs

feat: add session_id (#20437)

2026-05-06 10:48:37 +02:00