The Wire · Showcase
V8 SANDBOXING GOES LIVE IN SOURCE BUILDS
By RepoJournal · Filed · About OpenAI
Codex ships the first phase of in-process V8 sandboxing, hardening the JavaScript execution layer while two critical startup bugs get fixed.
The V8 sandboxing rollout [1] lands build system and Rust feature plumbing to run V8 in a hardened sandbox for source-built Bazel paths, deliberately keeping published rusty_v8 artifacts on their current non-sandboxed contract so this ships independently before changing any released artifacts. Two blocking sandbox issues got resolved overnight: a startup probe on NFS/autofs hosts that was stalling Codex launch [2] now times out gracefully instead of blocking initialization, and bubblewrap build failures [3] no longer panic but propagate as ordinary sandbox failures with proper symlink carveout handling. On the app-server side, /diff commands now route through the workspace abstraction [4] so remote sessions compute diffs against the correct machine, and Turn payloads added an itemsView enum [5] to disambiguate unloaded, summary, and fully hydrated turn states — unblocking future lazy-loading work. This is a coordinated hardening sprint across the execution sandbox, startup paths, and remote workspace semantics.
Action items
- → Verify V8 sandboxing builds in your local Bazel workflow and flag any feature gate issues before next release candidate openai/codex [plan]
- → Test /diff behavior on remote app-server sessions to confirm Git operations run against active workspace openai/codex [monitor]
- → Review Turn.items consumers to handle new itemsView metadata in app-server payloads openai/codex [plan]
References
- [1] Enable V8 sandboxing for source-built builds (#21146) openai/codex
- [2] fix(sandboxing): Bound advisory system bwrap startup probe (#20111) openai/codex
- [3] fix(linux-sandbox): avoid panic on bwrap build failures (#21127) openai/codex
- [4] feat(tui): route /diff through workspace commands ↗ openai/codex
- [5] add turn items view to app-server turns ↗ openai/codex
FAQ
- What changed in OpenAI on May 6, 2026?
- Codex ships the first phase of in-process V8 sandboxing, hardening the JavaScript execution layer while two critical startup bugs get fixed.
- What should OpenAI teams do about it?
- Verify V8 sandboxing builds in your local Bazel workflow and flag any feature gate issues before next release candidate • Test /diff behavior on remote app-server sessions to confirm Git operations run against active workspace • Review Turn.items consumers to handle new itemsView metadata in app-server payloads
- Which OpenAI repositories shipped on May 6, 2026?
- openai/codex