opt out pre-main process hardening

What variant of Codex are you using?

CLI

What feature would you like to see?

opt out pre-main process hardening

Right now, you cannot opt out of the process hardening imposed by codex. This breaks agent debugging and sanitizer workflows (ASan, LSan).

For a user who is already sandboxing in some way, it's seems reasonable to be able to opt out somehow. It's pain to maintain a fork for this small reason.

Additional information

I made an example implementation which uses targeted config loading (pre-main). Which only accept $HOME folder config, to prevent untrusted repo config injection.

An environment variable is simpler, but IMO less user friendly and fragile.

Check this fork:
https://github.com/openai/codex/compare/main...jkammerland:codex:main