Real server log excerpts (private paths, thread ids, and stack traces omitted).
Both sides ran Codex CLI 0.163.0. Both UI submissions per side were rejected before inference.

base dbfbe3993fca5235af11c243cb1f53c9cc718077
CodexAppServerRequestError: invalid thread settings override: invalid value for `sandbox_mode`: `DangerFullAccess` is not in the allowed set [ReadOnly, WorkspaceWrite] (set by /etc/codex/requirements.toml)

head e514ce64a88dfaa34781e5106eebb228ef2a9563
CodexAppServerRequestError: invalid thread settings override: invalid value for `sandbox_mode`: `DangerFullAccess` is not in the allowed set [ReadOnly, WorkspaceWrite] (set by /etc/codex/requirements.toml)