OpenAI Ships codex-zsh v0.1.0: Versioned Patched zsh Binary for Codex Sandbox

OpenAI

Tools official 1 src. ~1 min

OpenAI published codex-zsh v0.1.0 as a standalone versioned artifact — a minimally patched zsh build adding EXEC_WRAPPER support via a patch to Src/exec.c, enabling Codex's shell-escalation protocol to intercept execve calls and route each command through the Run/Escalate/Deny sandbox policy. Binaries ship for macOS (aarch64 and x86_64) and Linux (musl, both arches).

Why it matters

Publishing this as a separately versioned artifact decouples zsh patch maintenance from the main Codex CLI release cycle and makes the sandbox's trust boundary auditable.

Importance: 1/5

Supporting infrastructure release making Codex shell sandbox explicitly versioned and auditable

codex openai sandbox security cli open-source

Sources

official codex-zsh v0.1.0 release — GitHub