Agent refuses to retrieve Infisical token when asked to create Gitea PR

What version of Codex is running?

codex-cli 0.65.0

What subscription do you have?

pro

Which model were you using?

(not shown; default CLI model)

What platform is your computer?

• Windows

What issue are you seeing?

• Request: “Use Infisical to get the token needed to make a PR to Gitea for the current branch.”
• Actual: Agent refuses to fetch the token, citing policy; this worked yesterday.

What steps can reproduce the bug?

What steps can reproduce the bug?
1) Run codex-cli 0.65.0
2) Ask the agent to pull a Gitea PR token from Infisical for the current branch
3) Agent returns refusal instead of executing the request

What is the expected behavior?

• Agent retrieves the token via Infisical (given local permissions) and assists in creating the PR

Additional information

Additional information

• Environment context seen: approval_policy=never, sandbox_mode=danger-full-access, network_access=enabled,

shell=powershell