{"record":{"id":"49e5a95dc8d0b5c6","repo":"openai/codex","slug":"environment-network-policy-requires-managed-networ","errorCode":null,"errorMessage":"environment network policy requires managed network enforcement","messagePattern":"environment network policy requires managed network enforcement","errorType":"validation","errorClass":"std::io::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/core/src/config/network_proxy_spec.rs","lineNumber":189,"sourceCode":"            self.base_config.clone(),\n            self.requirements.clone(),\n            permission_profile,\n        )\n    }\n\n    /// Returns the effective traffic policy without exposing controller-owned proxy settings.\n    pub fn environment_policy(&self) -> EnvironmentNetworkPolicy {\n        EnvironmentNetworkPolicy::from_config(&self.config, self.hard_deny_allowlist_misses)\n    }\n\n    pub(crate) fn for_environment(\n        controller: Option<&Self>,\n        policy: &EnvironmentNetworkPolicy,\n        permission_profile: &PermissionProfile,\n        exec_policy: &Policy,\n    ) -> std::io::Result<Self> {\n        if matches!(permission_profile, PermissionProfile::Disabled) {\n            return Err(std::io::Error::new(\n                std::io::ErrorKind::InvalidInput,\n                \"environment network policy requires managed network enforcement\",\n            ));\n        }\n        if controller.is_some_and(|controller| !controller.enabled()) {\n            return Err(std::io::Error::new(\n                std::io::ErrorKind::InvalidInput,\n                \"environment network policy cannot override a disabled controller proxy\",\n            ));\n        }\n        let mut spec = match controller {\n            Some(controller) => controller.recompute_for_permission_profile(permission_profile)?,\n            None => Self::from_config_and_constraints(\n                NetworkProxyConfig {\n                    enabled: true,\n                    // Without a controller, the owner supplies the entire permission ceiling.\n                    dangerously_allow_all_unix_sockets: true,\n                    allow_local_binding: true,","sourceCodeStart":171,"sourceCodeEnd":207,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/core/src/config/network_proxy_spec.rs#L171-L207","documentation":"Error \"environment network policy requires managed network enforcement\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/core/src/config/network_proxy_spec.rs:189 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Enable managed network enforcement for the environment before applying this network policy."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}