Pro-tip: the codex CLI can't search the web by default (even if you bypass all sandbox restrictions). You need to explicitly enable --search. If you ask codex to search the web without that flag, it'll literally guess domain names and try curling their homepages.