diff --git a/codex-rs/core/src/session/tests/guardian_tests.rs b/codex-rs/core/src/session/tests/guardian_tests.rs
index d13239d810..d2697c747b 100644
--- a/codex-rs/core/src/session/tests/guardian_tests.rs
+++ b/codex-rs/core/src/session/tests/guardian_tests.rs
@@ -348,7 +348,7 @@ async fn guardian_allows_shell_command_additional_permissions_requests_past_poli
                     "workdir": workdir,
                     "timeout_ms": expiration_ms,
                     "sandbox_permissions": SandboxPermissions::WithAdditionalPermissions,
-                    "additional_permissions": PermissionProfile {
+                    "additional_permissions": PermissionProfile::<codex_utils_absolute_path::AbsolutePathBuf> {
                         network: Some(NetworkPermissions {
                             enabled: Some(true),
                         }),
diff --git a/codex-rs/core/tests/suite/extension_sandbox.rs b/codex-rs/core/tests/suite/extension_sandbox.rs
index 6d998a4693..c2722d44ca 100644
--- a/codex-rs/core/tests/suite/extension_sandbox.rs
+++ b/codex-rs/core/tests/suite/extension_sandbox.rs
@@ -197,7 +197,7 @@ async fn extension_tool_uses_granted_turn_permissions_without_local_persistence(
     let image_dir = tempfile::tempdir()?;
     let image_path = image_dir.path().canonicalize()?.join("granted.png");
     std::fs::write(&image_path, TINY_PNG_BYTES)?;
-    let requested_permissions = RequestPermissionProfile {
+    let requested_permissions = RequestPermissionProfile::<AbsolutePathBuf> {
         file_system: Some(FileSystemPermissions::from_read_write_roots(
             Some(vec![image_dir.path().canonicalize()?.try_into()?]),
             Some(Vec::new()),
diff --git a/codex-rs/protocol/src/models.rs b/codex-rs/protocol/src/models.rs
index 905947cf24..b6d23663f3 100644
--- a/codex-rs/protocol/src/models.rs
+++ b/codex-rs/protocol/src/models.rs
@@ -2479,12 +2479,15 @@ mod tests {
 
     #[test]
     fn additional_permission_profile_is_empty_when_all_fields_are_none() {
-        assert_eq!(AdditionalPermissionProfile::default().is_empty(), true);
+        assert_eq!(
+            AdditionalPermissionProfile::<AbsolutePathBuf>::default().is_empty(),
+            true
+        );
     }
 
     #[test]
     fn additional_permission_profile_is_not_empty_when_field_is_present_but_nested_empty() {
-        let permission_profile = AdditionalPermissionProfile {
+        let permission_profile = AdditionalPermissionProfile::<AbsolutePathBuf> {
             network: Some(NetworkPermissions { enabled: None }),
             file_system: None,
         };