
Codex sandbox explained: modes, boundaries and approvals
Understand what the Codex sandbox isolates, how its modes differ from approval policy, and what files, writes and network access still require review.
Read articleBrowse by topic
Workspace access, permissions and sandbox boundaries for coding agents.
In this topic
Articles can appear here while keeping their primary category, so related guidance stays discoverable across the library.
4 articles

Understand what the Codex sandbox isolates, how its modes differ from approval policy, and what files, writes and network access still require review.
Read article
Learn how Codex permissions control local file and network access, how profiles differ from legacy sandbox settings, and where document checks fit.
Read article
Understand how the Claude Code sandbox constrains Bash, how auto-allow differs from permissions, and which file and network exposures still need attention.
Read article
Learn how Claude Code permissions, modes and working-directory rules govern file access, and how those controls complement its Bash sandbox.
Read article