Codex’s network proxy was resolving a hostname before it checked whether that host was allowed, so the name went out to ...