#approvals
2 articles
-
What does Codex --full-auto actually do? Approvals and sandbox explained
--full-auto is shorthand for on-request approvals plus a workspace-write sandbox, and it is now deprecated. What runs unattended, what stays blocked, and what to use instead.
-
Codex approval_policy vs sandbox_mode: which pairs are safe (on-request + workspace-write, never + read-only)
What approval_policy and sandbox_mode each control in Codex CLI, what --full-auto really sets, and which combination to pin in config.toml for research, daily work and CI.