{"record":{"id":"6069898c42ae3186","repo":"openai/codex","slug":"failed-to-update-runtime-allowlist-err","errorCode":null,"errorMessage":"failed to update runtime allowlist: {err}","messagePattern":"failed to update runtime allowlist: (.+?)","errorType":"exception","errorClass":"anyhow::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/core/src/session/mod.rs","lineNumber":2298,"sourceCode":"            Self::validated_network_policy_amendment_host(amendment, network_approval_context)?;\n        let codex_home = self\n            .state\n            .lock()\n            .await\n            .session_configuration\n            .codex_home()\n            .clone();\n        let execpolicy_amendment =\n            execpolicy_network_rule_amendment(amendment, network_approval_context, &host);\n        let mut on_policy_applied = Some(on_policy_applied);\n\n        if let Some(started_network_proxy) = self.services.network_proxy.load_full() {\n            let proxy = started_network_proxy.proxy();\n            match amendment.action {\n                NetworkPolicyRuleAction::Allow => proxy\n                    .add_allowed_domain(&host)\n                    .await\n                    .map_err(|err| anyhow::anyhow!(\"failed to update runtime allowlist: {err}\"))?,\n                NetworkPolicyRuleAction::Deny => proxy\n                    .add_denied_domain(&host)\n                    .await\n                    .map_err(|err| anyhow::anyhow!(\"failed to update runtime denylist: {err}\"))?,\n            }\n            // Active enforcement changed successfully. Notify the owner before\n            // the next fallible await so cancellation cannot contradict it.\n            if let Some(on_policy_applied) = on_policy_applied.take() {\n                on_policy_applied();\n            }\n        }\n\n        self.services\n            .exec_policy\n            .append_network_rule_and_update(\n                &codex_home,\n                &host,\n                execpolicy_amendment.protocol,","sourceCodeStart":2280,"sourceCodeEnd":2316,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/core/src/session/mod.rs#L2280-L2316","documentation":"Error \"failed to update runtime allowlist: {err}\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/core/src/session/mod.rs:2298 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check the network proxy state and retry the allowlist update per the reported error."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}