After runner IPC is unblocked, Codex's default macOS sandbox denies fspy's shm_open call for /fspy_*:
Failed to spawn process: failed to create IPC channel: Operation not permitted (os error 1)
The sandbox denial is ipc-posix-shm-write-create.
Make fspy tracking work under the default Codex workspace sandbox without adding shared-memory allowances.
Sources: user report, Codex Seatbelt profile.
After runner IPC is unblocked, Codex's default macOS sandbox denies fspy's
shm_opencall for/fspy_*:The sandbox denial is
ipc-posix-shm-write-create.Make fspy tracking work under the default Codex workspace sandbox without adding shared-memory allowances.
Sources: user report, Codex Seatbelt profile.