codex.app should honor sandbox_workspace_write.writable_roots

What version of Codex is running?

260202.0859 (517)

What subscription do you have?

plus

Which model were you using?

_No response_

What platform is your computer?

_No response_

What terminal emulator and version are you using (if applicable)?

_No response_

What issue are you seeing?

sandbox_mode = "workspace-write"
writable_roots=["/Users/xxx/.cache"]

let codex.app write to /Users/xxx/.cache/1.txt, and codex.app asks the approval

What steps can reproduce the bug?

sandbox_mode = "workspace-write"
writable_roots=["/Users/xxx/.cache"]

let codex.app write to /Users/xxx/.cache/1.txt, and codex.app asks the approval

What is the expected behavior?

_No response_

Additional information

_No response_