Codex does not prevent reads outside the working directory | Hacker News Reader