Even simple read-only commands fail inside the sandbox.

Platform: Windows
Codex Desktop / Codex app
Sandbox mode: workspace-write
Shell: PowerShell
Workspace path: D:\Project\P2

Symptom:
Even simple read-only commands fail inside the sandbox.

Example command:
Get-Content -Raw <existing file path>

Error:
windows sandbox: runner error: CreateProcessAsUserW failed: 1312

Observed behavior:
The command fails before normal PowerShell execution.

Workaround:
Running the same command with require_escalated succeeds.

Expected behavior:
Read-only commands inside the workspace, or allowed read paths, should execute in the sandbox without escalation.

Persistence:
The issue continues after restarting Codex / session.