read-only depsite flags set --ask-for-approval never --sandbox danger-full-access

What version of Codex is running?

codex-cli 0.39.0

Which model were you using?

gpt-5

What platform is your computer?

mac arm

What steps can reproduce the bug?

run

codex --ask-for-approval never --sandbox danger-full-access -c model_reasoning_effort=low -m gpt-5 exec "$PROMPT"

but it does not give put the agent in write mode. Read-only.

What is the expected behavior?

I expect sandbox to be in write mode. While it is:

--------
workdir: X
model: gpt-5
provider: openai
approval: never
sandbox: read-only
reasoning effort: low
reasoning summaries: auto
--------

What do you see instead?

read-only

Additional information

_No response_