Documentation 2026-06-05 18:45 UTC to 2026-06-06 00:58 UTC

3329| `rules.prefix_rules[].pattern` | `array<table>` | Command prefix expressed as pattern tokens. Each token sets either `token` or `any_of`. |3329| `rules.prefix_rules[].pattern` | `array<table>` | Command prefix expressed as pattern tokens. Each token sets either `token` or `any_of`. |

3330| `rules.prefix_rules[].pattern[].any_of` | `array<string>` | A list of allowed alternative tokens at this position. |3330| `rules.prefix_rules[].pattern[].any_of` | `array<string>` | A list of allowed alternative tokens at this position. |

3331| `rules.prefix_rules[].pattern[].token` | `string` | A single literal token at this position. |3331| `rules.prefix_rules[].pattern[].token` | `string` | A single literal token at this position. |

3332| `windows.allowed_sandbox_implementations` | `array<string>` | Allowed native Windows sandbox implementations for `windows.sandbox` (`elevated` and `unelevated`). The list must not be empty. When both are allowed and no mode is selected, Codex prefers `elevated`. |

3332 3333 

3333Key3334Key

3334 3335 

3882 3883 

3883A single literal token at this position.3884A single literal token at this position.

3884 3885 

3886Key

3887 

3888`windows.allowed_sandbox_implementations`

3889 

3890Type / Values

3891 

3892`array<string>`

3893 

3894Details

3895 

3896Allowed native Windows sandbox implementations for `windows.sandbox` (`elevated` and `unelevated`). The list must not be empty. When both are allowed and no mode is selected, Codex prefers `elevated`.

3897 

3885Expand to view all3898Expand to view all

3886 3899 

49doesn’t work in your environment, use `unelevated` as a fallback while you49doesn’t work in your environment, use `unelevated` as a fallback while you

50troubleshoot the setup.50troubleshoot the setup.

51 51 

52Enterprise administrators can constrain which native sandbox implementations

53Codex can use through [`requirements.toml`](https://developers.openai.com/codex/enterprise/managed-configuration#admin-enforced-requirements-requirementstoml):

54 

55```

56[windows]

57allowed_sandbox_implementations = ["elevated"]

58```

59 

60This example requires the `elevated` sandbox and prevents users from falling

61back to `unelevated`. To permit either implementation, include both values;

62Codex prefers `elevated` when no mode is selected. See the

63[`requirements.toml` reference](https://developers.openai.com/codex/config-reference#requirementstoml) for

64the supported values.

65 

52By default, both sandbox modes also use a private desktop for stronger UI66By default, both sandbox modes also use a private desktop for stronger UI

53isolation. Set `windows.sandbox_private_desktop = false` only if you need the67isolation. Set `windows.sandbox_private_desktop = false` only if you need the

54older `Winsta0\\Default` behavior for compatibility.68older `Winsta0\\Default` behavior for compatibility.