codex sandbox is Codex’s command wrapper for running a program inside the same kind of OS-level sandbox Codex uses for shell commands.
On the installed Codex version, the wrapper supports: --permission-profile NAME — use a configured permissions profile --sandbox-state-json JSON — apply a serialized sandbox state --sandbox-state-readable-root PATH — add a readable directory --sandbox-state-disable-network — disable direct network access --allow-unix-socket PATH — permit access to a Unix socket --log-denials — print macOS sandbox denials after the command exits