codex-rs/ollama/src/client.rs (16 lines):
	- line 300: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 303: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 331: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 334: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 367: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 370: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 411: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 414: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 448: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 451: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 472: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 475: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 510: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 513: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 612: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 615: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR


codex-rs/app-server-protocol/src/protocol/v2/permissions.rs (15 lines):
	- line 542: DangerFullAccess,
	- line 551: ExternalSandbox {
	- line 572: DangerFullAccess,
	- line 581: ExternalSandbox {
	- line 613: SandboxPolicyDeserialize::DangerFullAccess => Ok(SandboxPolicy::DangerFullAccess),
	- line 625: SandboxPolicyDeserialize::ExternalSandbox { network_access } => {
	- line 626: Ok(SandboxPolicy::ExternalSandbox { network_access })
	- line 654: SandboxPolicy::DangerFullAccess => {
	- line 655: codex_protocol::protocol::SandboxPolicy::DangerFullAccess
	- line 662: SandboxPolicy::ExternalSandbox { network_access } => {
	- line 663: codex_protocol::protocol::SandboxPolicy::ExternalSandbox {
	- line 688: codex_protocol::protocol::SandboxPolicy::DangerFullAccess => {
	- line 689: SandboxPolicy::DangerFullAccess
	- line 694: codex_protocol::protocol::SandboxPolicy::ExternalSandbox { network_access } => {
	- line 695: SandboxPolicy::ExternalSandbox {


codex-rs/utils/cli/src/shared_options.rs (15 lines):
	- line 46: alias = "not-so-yolo",
	- line 48: conflicts_with_all = ["sandbox_mode", "dangerously_bypass_approvals_and_sandbox"]
	- line 55: long = "dangerously-bypass-approvals-and-sandbox",
	- line 56: alias = "yolo",
	- line 59: pub dangerously_bypass_approvals_and_sandbox: bool,
	- line 63: #[arg(long = "dangerously-bypass-hook-trust", default_value_t = false)]
	- line 94: || self.dangerously_bypass_approvals_and_sandbox;
	- line 103: dangerously_bypass_approvals_and_sandbox,
	- line 116: dangerously_bypass_approvals_and_sandbox: root_dangerously_bypass_approvals_and_sandbox,
	- line 137: *dangerously_bypass_approvals_and_sandbox =
	- line 138: *root_dangerously_bypass_approvals_and_sandbox;
	- line 161: || subcommand.dangerously_bypass_approvals_and_sandbox;
	- line 170: dangerously_bypass_approvals_and_sandbox,
	- line 191: self.dangerously_bypass_approvals_and_sandbox =
	- line 192: dangerously_bypass_approvals_and_sandbox;


codex-rs/protocol/src/protocol.rs (14 lines):
	- line 1054: DangerFullAccess,
	- line 1068: ExternalSandbox {
	- line 1207: SandboxPolicy::DangerFullAccess => true,
	- line 1208: SandboxPolicy::ExternalSandbox { .. } => true,
	- line 1216: SandboxPolicy::DangerFullAccess => true,
	- line 1217: SandboxPolicy::ExternalSandbox { network_access } => network_access.is_enabled(),
	- line 1228: SandboxPolicy::DangerFullAccess => Vec::new(),
	- line 1229: SandboxPolicy::ExternalSandbox { .. } => Vec::new(),
	- line 4717: let restricted = SandboxPolicy::ExternalSandbox {
	- line 4723: let enabled = SandboxPolicy::ExternalSandbox {
	- line 5073: SandboxPolicy::DangerFullAccess,
	- line 5074: SandboxPolicy::ExternalSandbox {
	- line 5077: SandboxPolicy::ExternalSandbox {
	- line 5966: sandbox_policy: SandboxPolicy::DangerFullAccess,


codex-rs/protocol/src/models.rs (13 lines):
	- line 281: SandboxPolicy::DangerFullAccess => Self::Disabled,
	- line 282: SandboxPolicy::ExternalSandbox { .. } => Self::External,
	- line 380: FileSystemSandboxKind::ExternalSandbox => unreachable!(
	- line 504: FileSystemSandboxKind::ExternalSandbox => return None,
	- line 591: FileSystemSandboxKind::ExternalSandbox => SandboxEnforcement::External,
	- line 606: FileSystemSandboxKind::ExternalSandbox => Self::External {
	- line 670: Self::Disabled => Ok(SandboxPolicy::DangerFullAccess),
	- line 671: Self::External { network } => Ok(SandboxPolicy::ExternalSandbox {
	- line 789: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => {
	- line 2852: PermissionProfile::from_legacy_sandbox_policy(&SandboxPolicy::DangerFullAccess);
	- line 2857: SandboxPolicy::DangerFullAccess
	- line 2917: "the legacy ExternalSandbox projection must not hide a split unrestricted filesystem policy"
	- line 2931: let sandbox_policy = SandboxPolicy::ExternalSandbox {


codex-rs/cli/src/main.rs (12 lines):
	- line 2212: let approval_policy = if shared.dangerously_bypass_approvals_and_sandbox {
	- line 2217: let sandbox_mode = if shared.dangerously_bypass_approvals_and_sandbox {
	- line 2218: Some(codex_protocol::config_types::SandboxMode::DangerFullAccess)
	- line 3253: "--dangerously-bypass-approvals-and-sandbox",
	- line 3264: for flag in ["--approve-for-me", "--not-so-yolo"] {
	- line 3288: assert!(!help.contains("--not-so-yolo"), "{help}");
	- line 3402: vec!["--dangerously-bypass-approvals-and-sandbox"],
	- line 3577: "--dangerously-bypass-hook-trust",
	- line 4056: fn resume_merges_dangerously_bypass_flag() {
	- line 4061: "--dangerously-bypass-approvals-and-sandbox",
	- line 4065: assert!(interactive.dangerously_bypass_approvals_and_sandbox);
	- line 4074: ["codex", "resume", "--dangerously-bypass-hook-trust"].as_ref(),


codex-rs/protocol/src/permissions.rs (12 lines):
	- line 222: ExternalSandbox,
	- line 590: kind: FileSystemSandboxKind::ExternalSandbox,
	- line 843: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => true,
	- line 854: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => true,
	- line 900: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => {
	- line 1597: FileSystemSandboxKind::ExternalSandbox => SandboxPolicy::ExternalSandbox {
	- line 1606: SandboxPolicy::DangerFullAccess
	- line 1608: SandboxPolicy::ExternalSandbox {
	- line 1671: SandboxPolicy::DangerFullAccess
	- line 1673: SandboxPolicy::ExternalSandbox {
	- line 1792: SandboxPolicy::DangerFullAccess => FileSystemSandboxPolicy::unrestricted(),
	- line 1793: SandboxPolicy::ExternalSandbox { .. } => FileSystemSandboxPolicy::external_sandbox(),


codex-rs/config/src/config_requirements.rs (12 lines):
	- line 1316: DangerFullAccess,
	- line 1319: ExternalSandbox,
	- line 1327: SandboxMode::DangerFullAccess => SandboxModeRequirement::DangerFullAccess,
	- line 1976: PermissionProfile::Disabled => SandboxModeRequirement::DangerFullAccess,
	- line 1977: PermissionProfile::External { .. } => SandboxModeRequirement::ExternalSandbox,
	- line 1981: SandboxModeRequirement::DangerFullAccess
	- line 2615: SandboxModeRequirement::DangerFullAccess,
	- line 3361: candidate: "DangerFullAccess".into(),
	- line 3663: candidate: "DangerFullAccess".into(),
	- line 3676: candidate: "ExternalSandbox".into(),
	- line 3772: candidate: "DangerFullAccess".into(),
	- line 3803: candidate: "DangerFullAccess".into(),


codex-rs/lmstudio/src/client.rs (12 lines):
	- line 222: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 225: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 254: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 257: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 285: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 288: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 313: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 316: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 337: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 340: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR
	- line 364: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 367: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR


codex-rs/exec/src/lib.rs (11 lines):
	- line 215: dangerously_bypass_approvals_and_sandbox: bool,
	- line 277: dangerously_bypass_approvals_and_sandbox,
	- line 296: let sandbox_mode = if dangerously_bypass_approvals_and_sandbox {
	- line 297: Some(SandboxMode::DangerFullAccess)
	- line 450: dangerously_bypass_approvals_and_sandbox,
	- line 568: dangerously_bypass_approvals_and_sandbox,
	- line 667: dangerously_bypass_approvals_and_sandbox,
	- line 801: // When --yolo (dangerously_bypass_approvals_and_sandbox) is set, also skip the git repo check
	- line 804: && !dangerously_bypass_approvals_and_sandbox
	- line 1256: Some(codex_app_server_protocol::SandboxMode::DangerFullAccess)
	- line 1265: .then_some(codex_app_server_protocol::SandboxMode::DangerFullAccess)


codex-rs/tui/src/debug_config.rs (8 lines):
	- line 103: SandboxModeRequirement::DangerFullAccess => PermissionProfile::Disabled,
	- line 104: SandboxModeRequirement::ExternalSandbox => PermissionProfile::External {
	- line 546: SandboxModeRequirement::DangerFullAccess => "danger-full-access".to_string(),
	- line 547: SandboxModeRequirement::ExternalSandbox => "external-sandbox".to_string(),
	- line 1098: SandboxModeRequirement::DangerFullAccess,
	- line 1099: SandboxModeRequirement::ExternalSandbox,
	- line 1112: SandboxModeRequirement::DangerFullAccess
	- line 1113: | SandboxModeRequirement::ExternalSandbox => {


codex-rs/shell-command/src/parse_command.rs (6 lines):
	- line 596: &vec_str(&["grep", "-R", "CODEX_SANDBOX_ENV_VAR", "-n", "."]),
	- line 598: cmd: "grep -R CODEX_SANDBOX_ENV_VAR -n .".to_string(),
	- line 599: query: Some("CODEX_SANDBOX_ENV_VAR".to_string()),
	- line 611: "CODEX_SANDBOX_ENV_VAR",
	- line 616: cmd: "grep -R CODEX_SANDBOX_ENV_VAR -n core/src/spawn.rs".to_string(),
	- line 617: query: Some("CODEX_SANDBOX_ENV_VAR".to_string()),


codex-rs/core/src/config/mod.rs (5 lines):
	- line 503: SandboxPolicy::DangerFullAccess
	- line 504: | SandboxPolicy::ExternalSandbox { .. }
	- line 534: SandboxModeRequirement::DangerFullAccess | SandboxModeRequirement::ExternalSandbox
	- line 3248: "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation."
	- line 3995: == SandboxModeRequirement::DangerFullAccess


codex-rs/tui/src/app_server_session.rs (5 lines):
	- line 1775: Some(codex_app_server_protocol::SandboxMode::DangerFullAccess)
	- line 1784: .then_some(codex_app_server_protocol::SandboxMode::DangerFullAccess)
	- line 1809: codex_app_server_protocol::SandboxMode::DangerFullAccess => PermissionProfile::Disabled,
	- line 2194: codex_app_server_protocol::SandboxPolicy::DangerFullAccess
	- line 3784: &codex_app_server_protocol::SandboxPolicy::DangerFullAccess,


codex-rs/core/src/sandboxing/mod.rs (4 lines):
	- line 15: use crate::spawn::CODEX_SANDBOX_ENV_VAR;
	- line 16: use crate::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR;
	- line 176: CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR.to_string(),
	- line 182: env.insert(CODEX_SANDBOX_ENV_VAR.to_string(), "seatbelt".to_string());


codex-rs/cli/src/debug_sandbox.rs (4 lines):
	- line 20: use codex_core::spawn::CODEX_SANDBOX_ENV_VAR;
	- line 21: use codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR;
	- line 403: env_map.insert(CODEX_SANDBOX_ENV_VAR.to_string(), "seatbelt".to_string());
	- line 540: cmd.env(CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR, "1");


codex-rs/utils/sandbox-summary/src/sandbox_summary.rs (4 lines):
	- line 8: SandboxPolicy::DangerFullAccess => "danger-full-access".to_string(),
	- line 16: SandboxPolicy::ExternalSandbox { network_access } => {
	- line 107: let summary = summarize_sandbox_policy(&SandboxPolicy::ExternalSandbox {
	- line 115: let summary = summarize_sandbox_policy(&SandboxPolicy::ExternalSandbox {


codex-rs/utils/cli/src/sandbox_mode_cli_arg.rs (4 lines):
	- line 17: DangerFullAccess,
	- line 25: SandboxModeCliArg::DangerFullAccess => SandboxMode::DangerFullAccess,
	- line 43: SandboxMode::DangerFullAccess,
	- line 44: SandboxModeCliArg::DangerFullAccess.into()


codex-rs/core/src/spawn.rs (4 lines):
	- line 21: pub const CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR: &str = "CODEX_SANDBOX_NETWORK_DISABLED";
	- line 26: pub const CODEX_SANDBOX_ENV_VAR: &str = "CODEX_SANDBOX";
	- line 40: /// `CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR` environment variable.
	- line 87: cmd.env(CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR, "1");


codex-rs/app-server/src/request_processors/thread_processor.rs (4 lines):
	- line 171: SandboxMode::DangerFullAccess,
	- line 172: codex_protocol::protocol::SandboxPolicy::DangerFullAccess
	- line 174: SandboxMode::DangerFullAccess,
	- line 175: codex_protocol::protocol::SandboxPolicy::ExternalSandbox { .. }


codex-rs/cli/src/doctor.rs (4 lines):
	- line 605: let approval_policy = if interactive.dangerously_bypass_approvals_and_sandbox {
	- line 610: let sandbox_mode = if interactive.dangerously_bypass_approvals_and_sandbox {
	- line 611: Some(codex_protocol::config_types::SandboxMode::DangerFullAccess)
	- line 3325: assert_eq!(overrides.sandbox_mode, Some(SandboxMode::DangerFullAccess));


codex-rs/sandboxing/src/policy_transforms.rs (3 lines):
	- line 473: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => {
	- line 555: FileSystemSandboxKind::ExternalSandbox
	- line 561: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => false,


codex-rs/app-server-protocol/src/protocol/v2/shared.rs (3 lines):
	- line 308: DangerFullAccess,
	- line 316: SandboxMode::DangerFullAccess => CoreSandboxMode::DangerFullAccess,
	- line 326: CoreSandboxMode::DangerFullAccess => SandboxMode::DangerFullAccess,


codex-rs/app-server-protocol/src/protocol/v2/tests.rs (3 lines):
	- line 315: sandbox: SandboxPolicy::DangerFullAccess,
	- line 1914: let v2_policy = SandboxPolicy::ExternalSandbox {
	- line 1921: codex_protocol::protocol::SandboxPolicy::ExternalSandbox {


codex-rs/prompts/src/permissions_instructions.rs (3 lines):
	- line 203: return (SandboxMode::DangerFullAccess, None);
	- line 305: SandboxMode::DangerFullAccess => messages.danger_full_access.as_deref(),
	- line 318: SandboxMode::DangerFullAccess => &*SANDBOX_MODE_DANGER_FULL_ACCESS_TEMPLATE,


codex-rs/tui/src/dynamic_tools.rs (2 lines):
	- line 620: SandboxPolicy::DangerFullAccess => SandboxMode::DangerFullAccess,
	- line 623: SandboxPolicy::ExternalSandbox { .. } => {


codex-rs/exec-server/src/server/file_system_handler.rs (2 lines):
	- line 387: ("danger.txt", SandboxPolicy::DangerFullAccess),
	- line 390: SandboxPolicy::ExternalSandbox {


codex-rs/thread-store/src/local/helpers.rs (2 lines):
	- line 300: "danger-full-access" => Ok(SandboxPolicy::DangerFullAccess),
	- line 303: "external-sandbox" => Ok(SandboxPolicy::ExternalSandbox {


sdk/python/src/openai_codex/_sandbox.py (2 lines):
	- line 7: DangerFullAccessSandboxPolicy,
	- line 70: root=DangerFullAccessSandboxPolicy(type="dangerFullAccess"),


codex-rs/state/src/extract.rs (2 lines):
	- line 438: sandbox_policy: SandboxPolicy::DangerFullAccess,
	- line 486: sandbox_policy: SandboxPolicy::DangerFullAccess,


codex-rs/tui/src/startup_orchestration.rs (2 lines):
	- line 15: let (sandbox_mode, approval_policy) = if cli.dangerously_bypass_approvals_and_sandbox {
	- line 17: Some(SandboxMode::DangerFullAccess),


codex-rs/app-server/src/request_processors/config_processor.rs (2 lines):
	- line 700: CoreSandboxModeRequirement::DangerFullAccess => Some(SandboxMode::DangerFullAccess),
	- line 701: CoreSandboxModeRequirement::ExternalSandbox => None,


codex-rs/ollama/src/lib.rs (2 lines):
	- line 83: if std::env::var(codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR).is_ok() {
	- line 86: codex_core::spawn::CODEX_SANDBOX_NETWORK_DISABLED_ENV_VAR


codex-rs/app-server-protocol/src/protocol/common.rs (2 lines):
	- line 3156: sandbox: v2::SandboxPolicy::DangerFullAccess,
	- line 4401: sandbox_policy: v2::SandboxPolicy::DangerFullAccess,


codex-rs/protocol/src/permission_profile_intersection.rs (2 lines):
	- line 24: ExternalSandbox,
	- line 45: return Err(PermissionIntersectionError::ExternalSandbox);


codex-rs/mcp-server/src/codex_tool_config.rs (2 lines):
	- line 90: DangerFullAccess,
	- line 98: CodexToolCallSandboxMode::DangerFullAccess => SandboxMode::DangerFullAccess,


codex-rs/core/src/exec_policy.rs (2 lines):
	- line 786: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => {
	- line 805: FileSystemSandboxKind::Unrestricted | FileSystemSandboxKind::ExternalSandbox => {


codex-rs/tui/src/cli.rs (1 line):
	- line 140: cmd.mut_arg("dangerously_bypass_approvals_and_sandbox", |arg| {


codex-rs/config/src/config_toml.rs (1 line):
	- line 801: SandboxMode::DangerFullAccess => PermissionProfile::Disabled,


codex-rs/core/src/exec.rs (1 line):
	- line 875: /// CODEX_SANDBOX_NETWORK_DISABLED=1 is added to the environment of the spawned


codex-rs/core/src/session/mod.rs (1 line):
	- line 635: SandboxPolicy::DangerFullAccess


codex-rs/thread-store/src/local/mod.rs (1 line):
	- line 942: sandbox_policy: SandboxPolicy::DangerFullAccess,


codex-rs/core/src/config/permission_profile_catalog.rs (1 line):
	- line 131: SandboxModeRequirement::DangerFullAccess | SandboxModeRequirement::ExternalSandbox => {


codex-rs/exec/src/cli.rs (1 line):
	- line 142: .mut_arg("dangerously_bypass_approvals_and_sandbox", |arg| {


codex-rs/tui/src/app/tests.rs (1 line):
	- line 304: "`--dangerously-bypass-hook-trust` is enabled. Enabled hooks may run without review for this invocation."


codex-rs/linux-sandbox/src/landlock.rs (1 line):
	- line 101: // would normally grant full network access (for example, DangerFullAccess).


codex-rs/protocol/src/config_types.rs (1 line):
	- line 113: DangerFullAccess,
