{"record":{"id":"888184b7d10fbc2b","repo":"openai/codex","slug":"environment-network-policy-cannot-override-a-disab","errorCode":null,"errorMessage":"environment network policy cannot override a disabled controller proxy","messagePattern":"environment network policy cannot override a disabled controller proxy","errorType":"validation","errorClass":"std::io::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/core/src/config/network_proxy_spec.rs","lineNumber":195,"sourceCode":"    /// Returns the effective traffic policy without exposing controller-owned proxy settings.\n    pub fn environment_policy(&self) -> EnvironmentNetworkPolicy {\n        EnvironmentNetworkPolicy::from_config(&self.config, self.hard_deny_allowlist_misses)\n    }\n\n    pub(crate) fn for_environment(\n        controller: Option<&Self>,\n        policy: &EnvironmentNetworkPolicy,\n        permission_profile: &PermissionProfile,\n        exec_policy: &Policy,\n    ) -> std::io::Result<Self> {\n        if matches!(permission_profile, PermissionProfile::Disabled) {\n            return Err(std::io::Error::new(\n                std::io::ErrorKind::InvalidInput,\n                \"environment network policy requires managed network enforcement\",\n            ));\n        }\n        if controller.is_some_and(|controller| !controller.enabled()) {\n            return Err(std::io::Error::new(\n                std::io::ErrorKind::InvalidInput,\n                \"environment network policy cannot override a disabled controller proxy\",\n            ));\n        }\n        let mut spec = match controller {\n            Some(controller) => controller.recompute_for_permission_profile(permission_profile)?,\n            None => Self::from_config_and_constraints(\n                NetworkProxyConfig {\n                    enabled: true,\n                    // Without a controller, the owner supplies the entire permission ceiling.\n                    dangerously_allow_all_unix_sockets: true,\n                    allow_local_binding: true,\n                    ..NetworkProxyConfig::default()\n                },\n                /*requirements*/ None,\n                permission_profile,\n            )?,\n        };","sourceCodeStart":177,"sourceCodeEnd":213,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/core/src/config/network_proxy_spec.rs#L177-L213","documentation":"Error \"environment network policy cannot override a disabled controller proxy\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/core/src/config/network_proxy_spec.rs:195 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Enable the controller proxy, or remove the environment network policy that tries to override it."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}