Unexpected approval prompt for writes inside workspace with workspace-write

What version of the Codex App are you using (From “About Codex” dialog)?

Version 26.715.31925 - Released 18.07.2026

What subscription do you have?

Business

What platform is your computer?

Windows 11 Pro

What issue are you seeing?

Codex asks for approval before writing to files inside the active project workspace, although sandbox_mode is set to workspace-write.

According to the documentation, workspace-write combined with approval_policy = "on-request" should allow edits and commands inside the workspace without approval. Approval should only be required when accessing files outside the workspace or crossing another sandbox boundary.

Configuration

sandbox_mode = "workspace-write"
approval_policy = "on-request"

[windows]
sandbox = "elevated"

[sandbox_workspace_write]
network_access = true

Expected behavior

Codex can create and modify normal files inside the active workspace without requesting approval.

Actual behavior

Codex displays an approval prompt asking whether writing inside the project directory should be allowed.

If this was due to an edited documentation file under .agents: It would be helpful to have a configuration option in the future that eliminates the need for confirmation. This is similar to how confirmation is not required for AGENTS.md.

Environment

• Platform: Windows 11
• Native Windows sandbox: elevated
• Codex version: 26.715.31925
• Client: Codex Windows App

What steps can reproduce the bug?

Edit files in your workspace path using workspace-write. Check when a confirmation prompt appears for all changes.

What is the expected behavior?

_No response_

Additional information

_No response_