VS Code Remote WSL does not respect ~/.codex/config.toml sandbox_mode = "read-only"

What version of the IDE extension are you using?

26.609.30741

What subscription do you have?

ChatGPT Plus

Which IDE are you using?

VS Code

What platform is your computer?

Windows + WSL Ubuntu 20.04

What issue are you seeing?

When using Codex inside VS Code with Remote WSL, the setting below in ~/.codex/config.toml does not appear to be respected:

model = "gpt-5.4-mini"
model_reasoning_effort = "low"
[projects."/home/test/src/test1_ws"]
trust_level = "untrusted"
sandbox_mode = "read-only"
web_search = "live"

Even with sandbox_mode = "read-only", Codex can still create and edit files in the workspace without asking for approval.
Is sandbox_mode = "read-only" expected to be enforced in VS Code Remote WSL sessions, or is this currently unsupported / overridden by the extension?

What steps can reproduce the bug?

1. Configure similar parameters.
2. Restart VS Code.
3. Open a new session and let's create a file.

What is the expected behavior?

Codex should not edit workspace files directly, or it should require approval before doing so.

Additional information

_No response_