Codex app automations have a "never" approval policy and can't escalate

Open 💬 2 comments Opened May 30, 2026 by anorth2

What version of the Codex App are you using (From “About Codex” dialog)?

26.527.31326

What subscription do you have?

Pro ($100)

What platform is your computer?

macOS (Apple Silicon)

What issue are you seeing?

In interactive mode sessions are able to escalate approvals for actions like docker socket interactions and running curl commands.

When triggered as an automation they have a "never" escalation policy. This hinders their capabilities since they can't interact with various tools (i.e. sending a curl to ntfy to trigger a phone notification)

What steps can reproduce the bug?

Create an automation that uses curl and notice it can't run curl.

What is the expected behavior?

It should trigger escalation and approval policies and trigger the curl command.

Additional information

_No response_

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗