Explorer subagents keep forgetting the read-only requirement and try to modify code

What version of Codex CLI is running?

0.112

What subscription do you have?

Pro

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.17.0-14-generic x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

ssh

What issue are you seeing?

I give a complex task to it. And it spawned explorers for some investigation.

After some time, the explorer forgot that we had granted read-only permission to it and began to edit.

I didn't meet such a case before when using gpt5.3codex.

What steps can reproduce the bug?

A complex task. Let it spawn agents to explore. The explore task is also hard.

What is the expected behavior?

Only give insights and findings.

Additional information

_No response_