Runs in its own container with its own volumes. The filesystem it sees is not the host's.
👤
One Seat
ttyd --max-clients 1. A single viewer at a time, so two people never fight over one keyboard.
🔗
Reaches The Platform
Contained, not sandboxed: through the gateway it creates and closes Dev HQ tasks, manages team members and spends fleet compute. It cannot approve its own work.
⚠ HOST lane — no container boundary.
This is a shell on the machine that runs the platform. Commands here act on the host
directly. It is deliberate, and it is why this lane is admin-only.
⚠ CLUSTER CONNECTION — CLEARANCE NOT GRANTED.
This device is not on the Kytran mesh, so Codex cannot be reached from here.
Connect to the tailnet and reload — signing in alone will not help.