RAP Sheet home
Install the bug reporting skill
Rank, 14 days: 35 on the Codex sheet
56 people reported

All time, since Sep 21, including 4 thumbs-up on GitHub.

Sites publishing blocked at source sync

“write_stdin rejected: approval required by policy, but AskForApproval::Granular.sandbox_approval is false”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/codex/themes/194/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Fading. 2 reports and thumbs-up in the last 7 days and 5 the week before, down from 16 a week at the mid-October peak.

4 bugs in this theme

  1. write_stdin blocked by sandbox_approvalNo workaround yet46 people
  2. Sites publishing blocked when auto-review rejects credential handoff via stdinNo workaround yet5 people
  3. Sites source-sync credential exposed or blocked at write_stdinNo workaround yet3 people
  4. Sites publish blocked by auto-review for /root/.codex scriptNo workaround yet2 people

What's included

  • Passing the short-lived repository credential to site-workflow.mjs via write_stdin is rejected with "approval required by policy, but AskForApproval::Granular.sandbox_approval is false", even when On request or Ask for approval is selected
  • Automatic approval review rejects the hidden-stdin credential handoff as credential exposure, including after the owner explicitly approves it
  • The temporary repository credential appears in the write_stdin approval prompt or is kept in tool-call metadata, so users cancel the sync
  • In ChatGPT Work, auto-review rejects the escalated site-workflow.mjs command because the script sits under /root/.codex
  • Reported on Windows and macOS desktop, Windows CLI, and ChatGPT Work cloud chats

Not included

  • Building or locally testing a Site before publishing
  • Creating a brand-new Site rather than updating an existing one
  • write_stdin approval issues in workflows other than Sites publishing

Original reports52, newest first

  1. Windows desktop / Sites 1.1.4: automatic review blocks source credential handoff before version saveOn GitHub#60144
  2. Sites publishing blocked: auto-review rejects the official helper’s hidden-stdin credential handoffOn GitHub#58932
  3. [macOS][Sites publish] Personal workspace receives granular policy with sandbox_approval=falseOn GitHub#57860
  4. BugOn GitHub#57467
  5. Sites Git credential handoff rejected by write_stdin security reviewOn GitHub#57133
  6. Codex desktop: write_stdin rejected by granular sandbox approval policy, blocking Sites publicationOn GitHub#56874
  7. [Windows] Sites publishing blocked by granular sandbox approval policy with no visible approval controlOn GitHub#56713
  8. macOS desktop Local: Sites write_stdin rejected with sandbox_approval=false after on-request config and restartOn GitHub#56299
  9. Windows: scoped network grant blocks credential-free write_stdin continuation in a projectless granular sessionOn GitHub#55961
  10. macOS app: “Ask for approval” still rejects Sites publishing with sandbox_approval=falseOn GitHub#55694
Show all 52Show only the newest 10
  1. Windows: Sites blocked because sandbox_approval is falseOn GitHub#55404
  2. macOS: Sites publication blocked at hidden credential stdin despite granted network and Git permissionsOn GitHub#55218
  3. macOS desktop: write_stdin rejected by granular policy while Ask for approval is selectedOn GitHub#55169
  4. Windows desktop: Ask for approval selected, but write_stdin is rejected because sandbox_approval is falseOn GitHub#55057
  5. Site deployment blockedOn GitHub#54507
  6. Desktop Ask for approval selected, but Sites publishing write_stdin fails with granular sandbox_approval=falseOn GitHub#54413
  7. Codex App cannot request approval: sandbox_approval is falseOn GitHub#54368
  8. Desktop Ask for approval conflicts with effective sandbox_approval=false, blocking Sites publishingOn GitHub#54298
  9. Windows desktop: write_stdin blocked by granular sandbox_approval=false despite On request settingOn GitHub#54274
  10. Sites 1.0.0: automatic review rejects documented hidden-stdin credential transfer after explicit consent (Windows)On GitHub#54228
  11. Desktop permission mismatch: hidden credential stdin rejected in original and fresh local chatsOn GitHub#54031
  12. Windows: Site publishing blocked by approval policy, then network/Git HTTPS errors after updateOn GitHub#53966
  13. Approved permissions, but write_stdin is blocked by sandbox_approval=falseOn GitHub#53610
  14. macOS desktop: Sites source sync blocked by granular sandbox approval after scoped network grantOn GitHub#53601
  15. Sites publishing from Codex blocked by credential handoff — supported route neededOn GitHub Discussions#53366
  16. Windows Sites publication blocked at write_stdin despite granted network and Git-directory permissionsOn GitHub#53292
  17. Windows desktop: Sites helper stdin blocked by granular sandbox approval after network grantOn GitHub#53198
  18. Windows: “Ask for approval” selected, but write_stdin blocked by sandbox_approval=falseOn GitHub#53134
  19. Windows CLI: temporary Sites credential displayed in write_stdin approval promptOn GitHub#53086
  20. Windows: Sites editing blocked by “sandbox_approval is false” despite “Ask for approval” being selectedOn GitHub#53064
  21. Sites publishing blocked: sandbox_approval=false despite Ask for approvalOn GitHub#53032
  22. Desktop Ask for approval blocks Sites source sync; /feedback unavailableOn GitHub#52971
  23. Sites publication blocked by missing secure credential transportOn GitHub#52801
  24. [macOS desktop] Scoped permission grant still leaves credential stdin workflow blocked without an actionable approvalOn GitHub#52759
  25. “On request” approval setting still results in sandbox_approval=false, blocking Sites publicationOn GitHub#52517
  26. Desktop app blocks write_stdin with sandbox_approval=false despite “Ask for approval” being selectedOn GitHub#52210
  27. Codex suddenly cannot publish updates to an existing Sites portalOn GitHub#51706
  28. Windows: write_stdin blocked by granular approval policy, preventing Sites editsOn GitHub#51688
  29. Desktop “Ask for approval” selected, but Sites publishing is blocked by granular.sandbox_approval=falseOn GitHub#51509
  30. Windows: Sites deployment blocked by AskForApproval::Granular.sandbox_approval errorOn GitHub#51414
  31. Sites hidden stdin blocked after approved additional permissions under granular policyOn GitHub#51018
  32. Sites update blocked: sandbox_approval is falseOn GitHub#50874
  33. [Windows][Sites] Deployment blocked by sandbox_approval policy despite “Ask for approval” being selectedOn GitHub#50841
  34. Windows Codex app: approval policy does not match config.toml, and write_stdin cannot display an approval promptOn GitHub#50768
  35. Windows: “Ask for approval” selected, but runtime disables sandbox approval requestsOn GitHub#50738
  36. Windows app: write_stdin blocked by granular sandbox_approval=false despite approval UI settingOn GitHub#50604
  37. ChatGPT Work / Sites: official publication workflow rejected by auto-reviewOn GitHub#50535
  38. [macOS] Sites publishing blocked by granular sandbox_approval=false despite Full access enabledOn GitHub#50069
  39. Windows: Sites publishing blocked by granular sandbox approval policy despite explicit approvalOn GitHub#49944
  40. Windows: official Sites workflow starts a PTY but required write_stdin and Ctrl-C are rejected under granular policyOn GitHub#49636
  41. permissionOn GitHub#49470
  42. Codex desktop on Windows: Sites publishing blocked by granular.sandbox_approval=false despite on-request policyOn GitHub#47182

Do you work on Codex?

Claim its RAP Sheet to see what your users report and answer them in one place.

Claim a tool