{
  "id": "permission-mode:codex-on-failure",
  "_kind": "PermissionMode",
  "_file": "lifecycle/permission-modes/codex-modes.yaml",
  "_cluster": "lifecycle",
  "attributes": {
    "displayName": "Codex on-failure approval policy",
    "mode": "on-failure",
    "isReadOnly": false,
    "requiresUserConsent": false,
    "enteredVia": "cli-flag",
    "classifierActive": false,
    "description": "Deprecated Codex CLI approval policy `on-failure`: commands run without asking first, but a failed command can escalate for unsandboxed execution. Codex CLI help recommends `on-request` for interactive runs and `never` for non-interactive runs.\n"
  },
  "outgoingEdges": [],
  "incomingEdges": [
    {
      "from": "agent-runtime-impl:codex.runtime@1.x",
      "to": "permission-mode:codex-on-failure",
      "kind": "operates_in_permission_mode",
      "attributes": {}
    }
  ]
}