OctoLink GEO

Codex 0.156.0 Turns Voice On and Closes a Windows Sandbox Gap

Author Editor

The 23 September 2026 Codex release enables voice by default and blocks non-loopback inbound traffic in the Windows offline sandbox.

Harness Engineering Codex Sandbox Voice

Direct answer

Codex 0.156.0, dated 23 September 2026, turns TUI voice conversations on by default and blocks non-loopback inbound traffic for the Windows offline sandbox.

Codex 0.156.0, recorded on 23 September 2026, changes two parts of the harness at once: how a person talks to the terminal session, and what the Windows sandbox will accept from the network.

Voice conversations are on by default. The release notes describe an F8 toggle, a /voice picker, and bundled audio runtimes for Linux and Windows. That is a step past 0.155.0 on 18 September, where /voice was experimental and had to be enabled through /experimental. The same 0.156.0 build adds a fullscreen terminal UI behind /tui, worktree sessions by default, and /usage analytics.

The sandbox change is narrower than the voice change

On the isolation side, 0.156.0 blocks non-loopback inbound traffic for the Windows offline sandbox. It also closes gaps involving privileged Linux and macOS sockets, and writes that went through read-only macOS file handles. Windows sandbox private desktops stay alive when a helper process exits, and the Windows sandbox service is included in the release artifacts. A managed network policy can apply to the Windows MXC sandbox.

A hotfix the same day, 0.156.1, only adds GPT-6 Sol and Luna to the model picker. The voice default and the inbound-traffic block are in 0.156.0.

Source: Releasebot, Codex updates for 23 September 2026.

FAQ

How do you turn voice off?
The notes say voice uses an F8 toggle and a /voice settings picker. Version 0.155.0 had kept /voice behind /experimental.
What else did 0.156.0 change in the sandbox?
It also closes gaps around privileged Linux and macOS sockets and writes through read-only macOS file handles, and it keeps Windows sandbox private desktops alive across helper exits.