Codex sandboxing could be bypassed, hundreds of actions could be hidden from the monitor, and serialization mismatches could ...