A sandbox mode that restricts file access but allows free network access (with or without cached web searches)

What variant of Codex are you using?

CLI

What feature would you like to see?

Running on Windows (haven't tried macos), unless the sandbox mode is "danger-full-access", network access seems to always be restricted. While this behaviour is great for many things, writing network components is incredibly challenging in this environment because connectivity often simply doesn't work (and you aren't asked for escalation in many cases). A sandbox mode with full network access while retaining the workspace file access restrictions would be a godsend. The option to use cached web searches would be beneficial in this case.

reported against codex cli 0.106.0.

Additional information

_No response_