# Codex sandboxing: separate filesystem scope from approvals

Codex treats sandbox enforcement and approval policy as separate controls, and subagents inherit the active parent runtime before role defaults apply.

- Published: 2026-06-09
- Category: platform-engineering
- Tags: codex, coding-agents, patterns, sandboxing, security
- HTML: https://harnez.ai/posts/agent-sandboxing-models/

This Markdown sibling contains the article metadata and canonical link. Use the HTML URL for the complete rendered article.