# Blocker S00-031

- Original task: S00-030
- Root task: S00-005
- Reporter: auto-ci-cd-d37c9faf28f3
- Role: ci-cd
- Original owner: auto-ci-cd-d37c9faf28f3
- Waits for user/external condition: True

## Cause

S00-030 no-model sandbox diagnostic still exits 1 before execution with the original socket directory ownership/mode guard, despite XDG_RUNTIME_DIR being user-owned mode 0700. Actual socket directory repair requires host owner input.
Automatic blocker limit reached; explicit external resolution required.

## One remediation outcome

Host owner supplies a verified valid actual app-server socket directory and a fresh no-model Codex sandbox probe passes under unchanged project write restrictions.

## Evidence / reproduction

Run codex -c sandbox_mode="workspace-write" -c sandbox_workspace_write.network_access=true sandbox -- python3 -c <synthetic probe>; exit 1: app-server socket directory must be a user-owned directory with mode 0700. See state/evidence/S00-030-auto-ci-cd-d37c9faf28f3.md.

The reporting agent must stop now. A new agent implements only S00-031.