feat: isolate sandbox session outputs and enforce tenant writes - #961

Open

yaojin3616 wants to merge 17 commits into

mainfrom

codex/session-isolated-sandbox-output

Commits on Aug 12, 2026

feat: isolate sandbox session outputs and enforce tenant writes
yaojin3616
committed
59329fa
fix: guide isolated sandbox output writes
yaojin3616
committed
6e9407b

Commits on Aug 13, 2026

fix: reuse isolated sandbox within agent loop
yaojin3616
committed
cfb8293
fix: apply sandbox quotas only to output changes
yaojin3616
committed
6989312
fix: preserve legacy skill paths in isolated sandbox
yaojin3616
committed
75544e1
refactor: use canonical sandbox skill paths
yaojin3616
committed
b030fab
fix: surface sandbox pip failures
yaojin3616
committed
e9db40e
fix: reload tool history after run completion
yaojin3616
committed
43a8b46

Commits on Aug 14, 2026

fix: exempt isolated output from file count limits
yaojin3616
committed
ddfe70e
fix: allow identity-scoped tenant switching
yaojin3616
committed
ec2e542
fix: replace isolated session output without CAS conflicts
yaojin3616
committed
8e9637a
fix: reuse sandbox workspace for agent loop
yaojin3616
committed
47ccee6
chore: retain workspace conflict diagnostics
yaojin3616
committed
f2de4ff
fix: make enterprise tenant migration idempotent
yaojin3616
committed
d6ff75e
fix: retry unknown model provider failures
yaojin3616
committed
fafb0d5
fix: unify agent-relative sandbox paths
yaojin3616
committed
266b410

Commits on Aug 17, 2026

Change execute_code default workspace_mode to isolated_output
yaojin3616
committed
b7806ee