Path	Lines of Code
codex-rs/bwrap/build.rs	87
codex-rs/bwrap/config.h	1
codex-rs/bwrap/src/main.rs	38
codex-rs/execpolicy/src/amend.rs	301
codex-rs/execpolicy/src/decision.rs	21
codex-rs/execpolicy/src/error.rs	94
codex-rs/execpolicy/src/execpolicycheck.rs	73
codex-rs/execpolicy/src/executable_name.rs	25
codex-rs/execpolicy/src/lib.rs	32
codex-rs/execpolicy/src/main.rs	14
codex-rs/execpolicy/src/parser.rs	391
codex-rs/execpolicy/src/policy.rs	354
codex-rs/execpolicy/src/rule.rs	175
codex-rs/execpolicy/src/sandbox_migration.rs	104
codex-rs/linux-sandbox/build.rs	3
codex-rs/linux-sandbox/src/bazel_bwrap.rs	60
codex-rs/linux-sandbox/src/bundled_bwrap.rs	277
codex-rs/linux-sandbox/src/bwrap.rs	2402
codex-rs/linux-sandbox/src/exec_util.rs	63
codex-rs/linux-sandbox/src/fd_mount.rs	75
codex-rs/linux-sandbox/src/landlock.rs	267
codex-rs/linux-sandbox/src/launcher.rs	409
codex-rs/linux-sandbox/src/lib.rs	30
codex-rs/linux-sandbox/src/linux_run_main.rs	1316
codex-rs/linux-sandbox/src/main.rs	3
codex-rs/linux-sandbox/src/proxy_lifecycle.rs	194
codex-rs/linux-sandbox/src/proxy_routing.rs	540
codex-rs/network-proxy/src/attribution.rs	129
codex-rs/network-proxy/src/authorization_path.rs	55
codex-rs/network-proxy/src/certs.rs	469
codex-rs/network-proxy/src/config.rs	853
codex-rs/network-proxy/src/connect_policy.rs	208
codex-rs/network-proxy/src/credential_broker.rs	562
codex-rs/network-proxy/src/credential_broker/providers.rs	106
codex-rs/network-proxy/src/credential_broker/providers/github.rs	120
codex-rs/network-proxy/src/credential_broker/providers/openai.rs	78
codex-rs/network-proxy/src/environment_policy.rs	68
codex-rs/network-proxy/src/http_proxy.rs	1641
codex-rs/network-proxy/src/lib.rs	101
codex-rs/network-proxy/src/mitm.rs	545
codex-rs/network-proxy/src/mitm_hook.rs	479
codex-rs/network-proxy/src/native_certs.rs	225
codex-rs/network-proxy/src/network_policy.rs	594
codex-rs/network-proxy/src/policy.rs	418
codex-rs/network-proxy/src/proxy.rs	2536
codex-rs/network-proxy/src/proxy/execution_scope.rs	46
codex-rs/network-proxy/src/reasons.rs	9
codex-rs/network-proxy/src/remote_config.rs	97
codex-rs/network-proxy/src/request_disconnect.rs	26
codex-rs/network-proxy/src/responses.rs	84
codex-rs/network-proxy/src/runtime.rs	1881
codex-rs/network-proxy/src/socks5.rs	1085
codex-rs/network-proxy/src/state.rs	412
codex-rs/network-proxy/src/upstream.rs	265
codex-rs/network-proxy/src/windows_proxy_ingress.rs	301
codex-rs/network-proxy/src/windows_tcp_attribution.rs	282
codex-rs/process-hardening/src/lib.rs	147
codex-rs/sandboxing/src/bwrap.rs	177
codex-rs/sandboxing/src/denial.rs	54
codex-rs/sandboxing/src/landlock.rs	78
codex-rs/sandboxing/src/lib.rs	86
codex-rs/sandboxing/src/manager.rs	473
codex-rs/sandboxing/src/policy_transforms.rs	532
codex-rs/sandboxing/src/seatbelt.rs	753
codex-rs/sandboxing/src/spawn.rs	36
codex-rs/sandboxing/src/terminal_queries.rs	84
codex-rs/sandboxing/src/violation.rs	261
codex-rs/sandboxing/src/windows.rs	317
codex-rs/shell-command/src/bash.rs	478
codex-rs/shell-command/src/command_safety/is_dangerous_command.rs	245
codex-rs/shell-command/src/command_safety/mod.rs	6
codex-rs/shell-command/src/command_safety/powershell_parser.ps1	230
codex-rs/shell-command/src/command_safety/powershell_parser.rs	244
codex-rs/shell-command/src/command_safety/powershell_tree_sitter.rs	434
codex-rs/shell-command/src/command_safety/windows_dangerous_commands.rs	647
codex-rs/shell-command/src/lib.rs	7
codex-rs/shell-command/src/parse_command.rs	2552
codex-rs/shell-command/src/powershell.rs	223
codex-rs/shell-command/src/shell_detect.rs	418
codex-rs/shell-command/src/shell_snapshot.rs	206
codex-rs/shell-escalation/src/lib.rs	38
codex-rs/shell-escalation/src/unix/escalate_client.rs	120
codex-rs/shell-escalation/src/unix/escalate_protocol.rs	58
codex-rs/shell-escalation/src/unix/escalate_server.rs	1001
codex-rs/shell-escalation/src/unix/escalation_policy.rs	14
codex-rs/shell-escalation/src/unix/execve_wrapper.rs	19
codex-rs/shell-escalation/src/unix/mod.rs	25
codex-rs/shell-escalation/src/unix/socket.rs	454
codex-rs/shell-escalation/src/unix/stopwatch.rs	200
codex-rs/utils/approval-presets/src/lib.rs	12
codex-rs/utils/pty/src/lib.rs	34
codex-rs/utils/pty/src/pipe.rs	337
codex-rs/utils/pty/src/process.rs	409
codex-rs/utils/pty/src/process_group.rs	224
codex-rs/utils/pty/src/pty.rs	489
codex-rs/utils/pty/src/tests.rs	1418
codex-rs/utils/pty/src/unix_io.rs	94
codex-rs/utils/pty/src/win/conpty.rs	152
codex-rs/utils/pty/src/win/job.rs	185
codex-rs/utils/pty/src/win/mod.rs	140
codex-rs/utils/pty/src/win/procthreadattr.rs	92
codex-rs/utils/pty/src/win/psuedocon.rs	306
codex-rs/utils/pty/src/windows_input.rs	25
codex-rs/utils/sandbox-summary/src/lib.rs	3
codex-rs/utils/sandbox-summary/src/sandbox_summary.rs	169
codex-rs/windows-sandbox-rs/build.rs	31
codex-rs/windows-sandbox-rs/sandbox_smoketests.py	494
codex-rs/windows-sandbox-rs/src/acl.rs	743
codex-rs/windows-sandbox-rs/src/allow.rs	335
codex-rs/windows-sandbox-rs/src/audit.rs	371
codex-rs/windows-sandbox-rs/src/cap.rs	168
codex-rs/windows-sandbox-rs/src/conpty/mod.rs	141
codex-rs/windows-sandbox-rs/src/deny_read_acl.rs	94
codex-rs/windows-sandbox-rs/src/deny_read_resolver.rs	690
codex-rs/windows-sandbox-rs/src/deny_read_state.rs	68
codex-rs/windows-sandbox-rs/src/deny_read_walker.rs	133
codex-rs/windows-sandbox-rs/src/desktop.rs	426
codex-rs/windows-sandbox-rs/src/dpapi.rs	80
codex-rs/windows-sandbox-rs/src/elevated/ipc_framed.rs	232
codex-rs/windows-sandbox-rs/src/elevated/mod.rs	3
codex-rs/windows-sandbox-rs/src/elevated/runner_client.rs	498
codex-rs/windows-sandbox-rs/src/elevated/runner_pipe.rs	110
codex-rs/windows-sandbox-rs/src/elevated_impl.rs	321
codex-rs/windows-sandbox-rs/src/env.rs	168
codex-rs/windows-sandbox-rs/src/helper_materialization.rs	528
codex-rs/windows-sandbox-rs/src/hide_users.rs	144
codex-rs/windows-sandbox-rs/src/identity.rs	375
codex-rs/windows-sandbox-rs/src/lib.rs	821
codex-rs/windows-sandbox-rs/src/logging.rs	12
codex-rs/windows-sandbox-rs/src/path_normalization.rs	26
codex-rs/windows-sandbox-rs/src/proc_thread_attr.rs	97
codex-rs/windows-sandbox-rs/src/process.rs	299
codex-rs/windows-sandbox-rs/src/resolved_permissions.rs	443
codex-rs/windows-sandbox-rs/src/sandbox_utils.rs	96
codex-rs/windows-sandbox-rs/src/setup.rs	1246
codex-rs/windows-sandbox-rs/src/setup_error.rs	228
codex-rs/windows-sandbox-rs/src/spawn_prep.rs	253
codex-rs/windows-sandbox-rs/src/ssh_config_dependencies.rs	230
codex-rs/windows-sandbox-rs/src/stdio_bridge.rs	105
codex-rs/windows-sandbox-rs/src/token.rs	438
codex-rs/windows-sandbox-rs/src/unified_exec/backends/elevated.rs	272
codex-rs/windows-sandbox-rs/src/unified_exec/backends/legacy.rs	465
codex-rs/windows-sandbox-rs/src/unified_exec/backends/mod.rs	3
codex-rs/windows-sandbox-rs/src/unified_exec/backends/windows_common.rs	169
codex-rs/windows-sandbox-rs/src/unified_exec/mod.rs	163
codex-rs/windows-sandbox-rs/src/unified_exec/tests.rs	1075
codex-rs/windows-sandbox-rs/src/wfp.rs	136
codex-rs/windows-sandbox-rs/src/wfp/filter_specs.rs	20
codex-rs/windows-sandbox-rs/src/wfp_setup.rs	163
codex-rs/windows-sandbox-rs/src/winutil.rs	154
codex-rs/windows-sandbox-rs/src/workspace_acl.rs	22
codex-rs/windows-sandbox-rs/src/wrapper.rs	320
