Windows Codex app: `apply_patch` can add files but fails to update/delete with `apply deny-read ACLs`

What version of the Codex App are you using (From “About Codex” dialog)?

OS: Windows Codex Desktop App package: OpenAI.Codex_26.707.3748.0_x64__2p2nqsd0c76g0

What subscription do you have?

Pro

What platform is your computer?

Windows

What issue are you seeing?

In the Windows Codex desktop app, apply_patch can successfully create new files, but it fails when trying to update or delete existing files inside writable workspace roots.

This happens even though the same files are readable and writable through PowerShell.

What steps can reproduce the bug?

Feedback ID: 019cfc4f-fccb-7550-8596-481e273ab17c

What is the expected behavior?

_No response_

Additional information

_No response_