Make external access opt-in by default in Codex CLI

What variant of Codex are you using?

Codex CLI 0.125.0

What feature would you like to see?

Make external access opt-in by default in Codex CLI.

Additional information

This is a security hardening / safer-defaults request, not a bug report.

Recommended defaults:

• Network access disabled unless explicitly enabled.
• No implicit git clone, git fetch, or git pull.
• No implicit package install commands such as npm install, pnpm install,

yarn install, or bun install.

• GitHub/Gmail and other connectors disabled unless explicitly enabled.
• External plugin/repo cache fetches should require clear user consent.
• Safety rules should be centralized and easy to inspect, not dependent on

wrapper scripts or cwd-specific behavior.

Rationale:

Supply-chain incidents such as compromised npm packages make automatic
dependency fetching risky. Users need a predictable default where Codex cannot
reach external repos, package registries, or connectors without explicit
approval.

The current configuration can be made safe with settings such as network_access
= false, connector/plugin disables, and global instructions, but these are
difficult for ordinary users and teams to discover and standardize.

A safer default would reduce accidental exposure for local development
environments and CI-like workflows.