#writable_roots

Let Codex write outside the workspace in workspace-write mode: writable_roots and the /tmp rules

What Codex's workspace-write sandbox can write to by default (cwd, /tmp, $TMPDIR), how to add paths with writable_roots, how to exclude temp directories, and why .git is read-only.