Repository navigation
Add MXC sandbox integrity dependency and policy preparation - #51831
Merged
copyberry[bot] merged 1 commit intoOct 7, 2026
Conversation
## What changed Add Windows MXC backend helpers to inventory the Codex executable, sandbox launcher, and available `rg` scanner when deny globs are configured. Prepare filesystem policies for inspection by reusing MXC temporary-directory and volume resolution and replacing deny globs with concrete path snapshots. Allow Windows deny-glob resolution to run its scanner with an explicit command environment and working directory, including an empty environment. The integrity helpers are not yet invoked by an execution runner. ## Testing Add a backend test verifying that deny-glob snapshots replace the original patterns, including empty snapshots, and affect `FileContentsChecker` results. GitOrigin-RevId: 409c527663d230d76d65be3bf0a37959f694d77e
copyberry
Bot
force-pushed
the
copyberry/codex-internal-to-codex-oss/409c527663d230d76d65be3bf0a37959f694d77e
branch
from
October 7, 2026 21:16
9c54898 to
3342ee8
Compare
copyberry
Bot
deleted the
copyberry/codex-internal-to-codex-oss/409c527663d230d76d65be3bf0a37959f694d77e
branch
October 7, 2026 21:16
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add MXC sandbox integrity dependency and policy preparation
What changed
Add Windows MXC backend helpers to inventory the Codex executable, sandbox
launcher, and available
rgscanner when deny globs are configured. Preparefilesystem policies for inspection by reusing MXC temporary-directory and volume
resolution and replacing deny globs with concrete path snapshots.
Allow Windows deny-glob resolution to run its scanner with an explicit command
environment and working directory, including an empty environment. The integrity
helpers are not yet invoked by an execution runner.
Testing
Add a backend test verifying that deny-glob snapshots replace the original
patterns, including empty snapshots, and affect
FileContentsCheckerresults.