How does sandboxing work for code? Is there a way to control the isolation myself, e.g. let it run code only in some VM that I provide? Edit: is there a sandbox for code?
- Codex runs under its native OS sandbox (Seatbelt on macOS, bubblewrap on Linux) — where it's sandboxed to the selected working directory with network off. - Claude Code's sandbox is opt-in and we don't enable it yet, but we load your Claude config (~/.claude/settings.json), so if you've enabled sandboxing there it should work.
Surfacing these options in the app UI is a small change on our side, which we'll pick up shortly.