Most AI coding tools don’t sandbox on Windows (except one)

Most AI coding tools on Windows lack proper sandboxing, unlike Linux and macOS which have built-in solutions. OpenAI addressed this gap by building a custom Windows security sandbox from scratch in Rust for their Codex app, using native Windows features like restricted tokens, file system ACLs, dedicated sandbox users, and firewall rules. The project was open-sourced, making it the only AI coding tool to implement proper sandboxing on Windows.