mirror of
https://github.com/openai/codex.git
synced 2026-10-19 16:17:49 +00:00
## Why Configuration parser errors can include entire configuration lines containing credentials. Persistent policy-rejection events must avoid recording those values. ## What changed Replace free-form error text in Windows sandbox provisioning policy-rejection events with known stage labels and typed cloud, HTTP, I/O, and Win32 error codes. Use fixed fallback labels when the stage or cause is unrecognized. ## Testing Add regression coverage using malformed requirements and cloud configuration fragments containing a synthetic secret. Verify that diagnostics exclude parser values while retaining safe error codes, and that unknown errors produce fixed fallback text. GitOrigin-RevId: 4f2fa5f6f602c34451776ec31381a102213660b8