Codex CLI: Open-Source Harness and Explicit OS SandboxingCodex CLI: Open-Source Harness and Explicit OS Sandboxing
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Codex CLI's edge: open-source harness + OS sandbox
I ship client code with Claude Code. When I evaluate Codex as a second seat, the interesting part isn't another model race — it's that the harness itself is open-source and the OS sandbox is explicit.
OpenAI publishes Codex as a lightweight terminal coding agent (github.com/openai/codex). Sandbox modes are separate from approval prompts: read-only inspects files and asks before edits or commands; workspace-write (the default low-friction path) reads and edits inside the workspace with routine local commands inside the boundary and network restricted unless you enable it; danger-full-access lifts the sandbox. Full access = danger-full-access + approvals set to never. Docs: https://learn.chatgpt.com/docs/sandboxing.md
Project instructions live in AGENTS.md — global ~/.codex/AGENTS.md plus nested project files — so a second seat can inherit the same house rules without a private config format.
How I'd try it as seat 2: start workspace-write + on-request, keep Claude Code on the hard multi-file ship path, and only open danger-full-access for a throwaway sandbox repo.
Do you want your coding CLI open-source even if you still pay for the model behind it?
More at huzaifatahir.dev
Post image
Post image
Post image
Post image
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started