Skip to content

Move macOS sandbox builders into codex-sandboxing#15593

Merged
pakrym-oai merged 7 commits intomainfrom
pakrym/sandboxing-crate-step-2-macos-permissions
Mar 24, 2026
Merged

Move macOS sandbox builders into codex-sandboxing#15593
pakrym-oai merged 7 commits intomainfrom
pakrym/sandboxing-crate-step-2-macos-permissions

Conversation

@pakrym-oai
Copy link
Copy Markdown
Collaborator

Summary

  • move macOS permission merging/intersection logic and tests from codex-core into codex-sandboxing
  • move seatbelt policy builders, permissions logic, SBPL assets, and their tests into codex-sandboxing
  • keep codex-core owning only the seatbelt spawn wrapper and switch call sites to import the moved APIs directly

Notes

  • no re-exports added
  • moved the seatbelt tests with the implementation so internal helpers could stay private
  • local verification is still finishing while this PR is open
Base automatically changed from pakrym/sandboxing-crate-step-1-landlock to main March 24, 2026 03:56
@pakrym-oai pakrym-oai marked this pull request as ready for review March 24, 2026 04:09
@pakrym-oai pakrym-oai merged commit 431af08 into main Mar 24, 2026
37 of 38 checks passed
@pakrym-oai pakrym-oai deleted the pakrym/sandboxing-crate-step-2-macos-permissions branch March 24, 2026 04:26
@github-actions github-actions bot locked and limited conversation to collaborators Mar 24, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

2 participants