Codex's Windows offline sandbox blocked outbound traffic but not inbound
GitHub·medium signal
openai/codex PR #44639 (merged 2026-09-10) adds an inbound firewall rule scoped to the offline sandbox user's SID that blocks all protocols and ports from non-loopback addresses, matching the outbound block that already existed. Until now, a process in the Windows offline sandbox could still accept connections from the network. PR #44658 the same day keeps sandbox private desktops alive across helper exits.