Native Codex PR review can bypass nested Bubblewrap with approvals retained
Observation (2026-09-08 UTC, local Codex CLI 0.149.0 in the Shield/theft worktree): a required native `codex review --base` failed inside a nested workspace-write sandbox because Bubblewrap could not initialize its loopback namespace. After explicit user authorization, rerunning …