Skip to content

Move macOS sandbox builders into codex-sandboxing#15593

Open
pakrym-oai wants to merge 7 commits intomainfrom
pakrym/sandboxing-crate-step-2-macos-permissions
Open

Move macOS sandbox builders into codex-sandboxing#15593
pakrym-oai wants to merge 7 commits intomainfrom
pakrym/sandboxing-crate-step-2-macos-permissions

Conversation

@pakrym-oai
Copy link
Collaborator

Summary

  • move macOS permission merging/intersection logic and tests from codex-core into codex-sandboxing
  • move seatbelt policy builders, permissions logic, SBPL assets, and their tests into codex-sandboxing
  • keep codex-core owning only the seatbelt spawn wrapper and switch call sites to import the moved APIs directly

Notes

  • no re-exports added
  • moved the seatbelt tests with the implementation so internal helpers could stay private
  • local verification is still finishing while this PR is open

Base automatically changed from pakrym/sandboxing-crate-step-1-landlock to main March 24, 2026 03:56
@pakrym-oai pakrym-oai marked this pull request as ready for review March 24, 2026 04:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants