VS Code Remote WSL does not respect ~/.codex/config.toml sandbox_mode = "read-only" #28690

What version of the IDE extension are you using?

26.609.30741

What subscription do you have?

ChatGPT Plus

Which IDE are you using?

VS Code

What platform is your computer?

Windows + WSL Ubuntu 20.04

What issue are you seeing?

When using Codex inside VS Code with Remote WSL, the setting below in ~/.codex/config.toml does not appear to be respected:

model = "gpt-5.4-mini"
model_reasoning_effort = "low"
[projects."/home/test/src/test1_ws"]
trust_level = "untrusted"
sandbox_mode = "read-only"
web_search = "live"

Even with sandbox_mode = "read-only", Codex can still create and edit files in the workspace without asking for approval.
Is sandbox_mode = "read-only" expected to be enforced in VS Code Remote WSL sessions, or is this currently unsupported / overridden by the extension?

What steps can reproduce the bug?

1. Configure similar parameters.
2. Restart VS Code.
3. Open a new session and let's create a file.

What is the expected behavior?

Codex should not edit workspace files directly, or it should require approval before doing so.

Additional information

No response