displayName
Codex untrusted approval policy
mode
untrusted
isReadOnly
false
requiresUserConsent
true
enteredVia
cli-flag
classifierActive
false
description
Codex CLI approval policy `untrusted`: trusted commands can run without asking, while commands outside the trusted set escalate to the user for approval.