Codex agents running in their default sandbox can now reach OpenRig's daemon on your machine, so they pick up and hand off queue work like any other agent. OpenRig only adds the network setting when your own Codex config hasn't made a choice.
Codex seats can now reach the local daemon under OpenRig's default workspace-write sandbox, so they can do their queue work. OpenRig turns on network inside the sandbox only when you haven't made your own choice and no managed requirement restricts it.
Not checked with real logins, managed policy bundles or on Linux. To keep it off, set `network_access = false` under `[sandbox_workspace_write]` in your Codex config.
- Pull request
- #608
- Release
- OpenRig 0.6.5 release notes