Codex App for Windows times out after submitting a prompt when the enterprise requirements policy contains permissions.filesystem.deny_read.

What version of the Codex App are you using (From “About Codex” dialog)?

26.820

What subscription do you have?

Enterprise

What platform is your computer?

Windows 11 Windows sandbox requirement: elevated

What issue are you seeing?

Observed:

• Codex App opens normally.
• Model selector works.
• A new chat can be created.
• After submitting a prompt, the turn waits and eventually times out.
• No codex-windows-sandbox-setup process remains.
• No .codex/.sandbox/setup_error.json or sandbox.log is generated.

Control:
Removing only permissions.filesystem.deny_read restores normal operation.

The same behavior occurs with tilde paths and absolute Windows glob paths.

What steps can reproduce the bug?

Minimal requirement:

[permissions.filesystem]
deny_read = [
"C:/Users//.ssh/*"
]

start new chat after requirments.toml loaded.

What is the expected behavior?

_No response_

Additional information

#36087

https://github.com/openai/codex/issues/34842