displayName
Codex on-failure approval policy
mode
on-failure
isReadOnly
false
requiresUserConsent
false
enteredVia
cli-flag
classifierActive
false
description
Deprecated Codex CLI approval policy `on-failure`: commands run without asking first, but a failed command can escalate for unsandboxed execution. Codex CLI help recommends `on-request` for interactive runs and `never` for non-interactive runs.