I have my agent sandboxed, codex is sandboxing by default.