Creating a secure and efficient sandbox environment to bring Codex support to Windows
OpenAI brought Codex to Windows by building a native sandbox using restricted tokens and Job Objects. Restricted tokens limit child processes to the workspace folder via ACLs, while Job Objects contai…