Model modifying files in a very questionable way

What version of Codex CLI is running?

codex-cli 0.121.0

What subscription do you have?

Plus

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.19.0-gentoo x86_64 AMD Ryzen 7 8845H w/ Radeon 780M Graphics

What terminal emulator and version are you using (if applicable)?

alacritty

What issue are you seeing?

✘ Failed to apply patch

─ Worked for 1m 03s ────────────────────────────────────────────────────────────────────

• The patch tool itself cannot write in this read-only session, and invoking the shell
  wrapper is blocked as well. I’m switching to a single escalated file-write command for
  main.typ only, then I’ll compile to catch Typst syntax issues.


✔ You approved codex to run python3 -c $'from pathlib import Path\ncontent =
  r\'\'\'#import "@local/stux-... this time

• Ran python3 -c $'from pathlib import Path\ncontent = r\'\'\'#import "@local/

What steps can reproduce the bug?

Don't know

What is the expected behavior?

Codex should patch files in normal ways

Additional information

_No response_