windows.md +10 −0
27- Runs commands as a dedicated Windows Sandbox User.27- Runs commands as a dedicated Windows Sandbox User.
28- Limits network access by installing Windows Firewall rules.28- Limits network access by installing Windows Firewall rules.
29 29
30### Sandbox permissions
31
32Running Codex in full access mode means Codex is not limited to your project
33 directory and might perform unintentional destructive actions that can lead to
34 data loss. For safer automation, keep sandbox boundaries in place and use
35 [rules](https://developers.openai.com/codex/rules) for specific exceptions, or set your [approval policy to
36 never](https://developers.openai.com/codex/agent-approvals-security#run-without-approval-prompts) to have
37 Codex attempt to solve problems without asking for escalated permissions,
38 based on your [approval and security setup](https://developers.openai.com/codex/agent-approvals-security).
39
30### Grant sandbox read access40### Grant sandbox read access
31 41
32When a command fails because the Windows sandbox can't read a directory, use:42When a command fails because the Windows sandbox can't read a directory, use: