I have mentioned this a couple months ago to a higher up. I do not feel it is safe and prudent to let codex loose with full root access, network access and remote access to other LAN connected machines.

Not to mention it having access to any files and binaries which may expose credentials or setup which may lead to credential leak via hsm access.

I was simply told to bring it up to an another manager for a "second opinion", but I'm not sure if this even a good way to approach it. Security by committee is an abysmal trap and a way for deferred liability.

I use a reverse firewall to monitor and control my apps trying to access the network.

There are a lot of things that access the network but don’t really explain that they do or how. VScode plugins do this often.