Unclear interaction between approval mode and file edits

What is the type of issue?

Documentation is incorrect

What is the issue?

The codex security docs say this about running with --ask-for-approval untrusted:

Codex can read and edit files but asks for approval before running untrusted commands.

However, I find that codex keeps asking for permission to edit files, regardless of the sandbox mode.

With --sandbox workspace-write --ask-for-approval untrusted it doesn't do edits automatically, which is very inconvenient.

I prefer having a list of white-listed commands instead of letting the model decide when to ask for permission. But I can't seem to make it work. I haven't done a deep dive into how on-request is handled, but I still believe the current behaviour (and docs) is unclear.

Where did you find it?

_No response_