#writable_roots

writable_roots = ["/path"]: let Codex write outside the workspace (cwd, /tmp, $TMPDIR are writable by default)

In [sandbox_workspace_write] add writable_roots for caches such as ~/.pyenv/shims, set exclude_slash_tmp or exclude_tmpdir_env_var to block temp dirs, and why .git stays read-only.