Codex macOS Sites workflow blocked: granular sandbox_approval=false with no approval prompt

ruoxiyyqx-droid · ghdev · 2026-10-13

openai/codex issue #53601: On the macOS desktop app (version 26.1007.30912), General settings show Full access enabled, yet the official Sites source workflow helper rejects requests with writestdin rejected: approval required by policy, but AskForApproval::Granular.sandboxapproval is false — and no actionable approval prompt appears.

After a full restart, one retry passed stdin but Git hit a DNS failure; approving a scoped network permission (network.enabled=true for the turn) didn't help — the same granular rejection recurred. The user confirmed no approvalpolicy/sandboxmode/sandboxapproval/requestpermissions fields exist in user or project configs. Expected behavior: the workflow should run within granted permissions or surface an actionable approval prompt.

Original post →

More from coding & agent

coding & agent channel →