II.
PermissionMode overview
Reference · livepermission-mode:codex-on-failure
Codex on-failure approval policy overview
Deprecated Codex CLI approval policy `on-failure`: commands run without asking first, but a failed command can escalate for unsandboxed execution. Codex CLI help recommends `on-request` for interactive runs and `never` for non-interactive runs.
Attributes
displayName
Codex on-failure approval policy
mode
on-failure
isReadOnly
false
requiresUserConsent
false
enteredVia
cli-flag
classifierActive
false
description
Deprecated Codex CLI approval policy `on-failure`: commands run without asking first, but a failed command can escalate for unsandboxed execution. Codex CLI help recommends `on-request` for interactive runs and `never` for non-interactive runs.
Outgoing edges
None.
Incoming edges
operates_in_permission_mode1
- agent-runtime-impl:codex.runtime@1.x·AgentRuntimeImplCodex CLI Runtime (1.x)