From 18d61f6923896aa273ae9a369d423ac75dd8963a Mon Sep 17 00:00:00 2001
From: evawong-oai <evawong@openai.com>
Date: Wed, 15 Apr 2026 15:09:39 -0700
Subject: [PATCH] [docs] Restore SECURITY.md update from PR 17848 (#18004)

Restore the `SECURITY.md` section from
https://github.com/openai/codex/pull/17848. Note this was lost in the
revert PR https://github.com/openai/codex/pull/18003.
---
 SECURITY.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/SECURITY.md b/SECURITY.md
index d6dd56891..29a9b903d 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -11,3 +11,7 @@ Our security program is managed through Bugcrowd, and we ask that any validated
 ## Vulnerability Disclosure Program
 
 Our Vulnerability Program Guidelines are defined on our [Bugcrowd program page](https://bugcrowd.com/engagements/openai).
+
+## How to operate CODEX safely
+
+For details on Codex security boundaries, including sandboxing, approvals, and network controls, see [Agent approvals & security](https://developers.openai.com/codex/agent-approvals-security).