›_ Codex Issues
Codex Issues / #10395

In Home directory Sandbox is set to 'workspace-write' instead of 'read-only'

Open 💬 4 comments Opened Feb 2, 2026 by kingtistel
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What version of Codex is running?

codex-cli 0.93.0

What subscription do you have?

Business

Which model were you using?

gpt-5.2-codex

What platform is your computer?

Darwin 25.2.0 arm64 arm

What terminal emulator and version are you using (if applicable)?

iTerm2

What issue are you seeing?

When starting codex-cli in the Home directory -- or any directory not under version control -- after the first time, codex is started with Sandbox: workspace-write and Approval: untrusted instead of read-only / on-request.

<img width="632" height="500" alt="Image" src="https://github.com/user-attachments/assets/fbc31c34-221d-44e3-b744-1dd749fa2e65" />

What steps can reproduce the bug?

  1. Start codex in Home directory -- or any directory not under version control -- for the first time,
  2. You're presented with a question to select the approval policy -- defaulted to require approval,

<img width="859" height="116" alt="Image" src="https://github.com/user-attachments/assets/aa13483b-4ed3-4868-8624-7f845cd1e11d" />

  1. Accept the default,
  2. Check status with /status -- it shows Sandbox: read-only and Approval: on-request,
  3. Exit and relaunch codex
  4. Check status with /status -- it now shows Sandbox: workspace-write and Approval: untrusted.

What is the expected behavior?

Expected is that each time starting codex from Home directory or any directory not under version control:

  1. Be asked our approval selection,

-OR-

  1. Start with the previously selected choice.

(¿ How would we change our selection in this flow is chosen ?)

Additional information

_No response_

View original on GitHub ↗

4 Comments

github-actions[bot] contributor · 6 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #9932
  • #8193
  • #10389

Powered by Codex Action

kingtistel · 6 months ago

Hi,
I don't think this issue is a duplicate of any of the other ones mentioned by Github-actions,
and I was asked to split this issue from #9932 .

kingtistel · 6 months ago

A W/A I found -- not sure how convenient -- is to ctrl-c the approval selection request.

etraut-openai contributor · 6 months ago

Thanks for the bug report. There is a bug here, but it's a little different than what you reported. The trust level informs the approval mode (whether tool calls need to be approved by the user) but not the sandbox mode (whether the agent can write to files). In both cases, the sandbox mode should be workspace-write after the trust level has been established.

The bug occurs only the first time the trust level is established. On subsequent invocations, the sandbox mode is correctly reported as workspace-write.