#approvals

Codex CLI approval modes versus sandbox modes: safe combinations for autonomous runs

What Codex CLI's approval policy and sandbox mode each control, what --full-auto really does, how to pin them in config.toml, and which pair fits research, daily work and CI.