[Windows] CodexSandboxOffline profile blocks Windows 11 in-place upgrades (0x8007001F / 0x80070057)

Codex version

Codex Desktop 26.721.11231.0

Environment

• Windows 11 Pro 21H2, build 22000.2538
• Native Windows sandbox enabled
• Target Windows Setup build: 10.0.26100.8855
• Upgrade launched through the official Windows 11 Installation Assistant

Problem

The local CodexSandboxOffline profile created by Codex prevents Windows Setup from completing an in-place feature upgrade.

Windows Setup proceeds through compatibility checks, downloads and image staging, but fails during profile migration. The UI only reports:

Windows 11 installation has failed

The Panther setup logs identify the Codex sandbox profile as the migration blocker:

Cannot add mapping for user profile C:\Users\CodexSandboxOffline.
Error: 87: The parameter is incorrect.

MigPlatformStartupOnline caught exception:
The specified user does not have a valid profile. [0x000004E5]

CGatherData: Migration phase failed. Status: 4

Operation failed: Gather data, scope: EVERYTHING.
Error: 0x8007001F

ExecuteOperations: Failed execution phase Pre-Finalize.
Error: 0x80070057

Additional local inspection showed:

Process identity: <machine>\CodexSandboxOffline
USERPROFILE: C:\Users\<real-user>
Sandbox user's HKEY_USERS hive loaded: false

A corresponding ProfileList registration and C:\Users\CodexSandboxOffline directory exist, so Windows Setup attempts to migrate the account as a normal user profile. The profile's unusual sandbox configuration then causes migration to abort.

Disk space, EFI space, TPM, Secure Boot, CPU and RAM compatibility all passed. Setup recorded no compatibility or disk-space block.

Steps to reproduce

1. Install Codex Desktop on Windows.
2. Complete native Windows sandbox setup, creating CodexSandboxOffline and CodexSandboxOnline.
3. Use Codex so commands execute through the sandbox account.
4. Start a supported Windows 11 in-place feature upgrade.
5. Allow Setup to reach its migration/pre-finalize phase.
6. Observe Setup terminating with the errors above.

Expected behavior

Codex's helper accounts should not block supported Windows feature upgrades. Ideally, Codex should either:

• provision sandbox accounts so Windows Setup recognizes them as non-migratable;
• provide a supported pre-upgrade teardown/recreation mechanism; or
• document and detect this condition before Setup fails.

Codex already recreates these helper accounts during sandbox setup, so a safe teardown path appears feasible.

Impact

This prevents affected Codex Desktop users from installing major Windows security and feature updates. The failure occurs late in Setup after a large download and lengthy staging process, while the visible error contains no actionable diagnosis.

No full logs are attached because they contain machine-specific paths. Additional redacted excerpts can be provided if needed.