A thread you can test
Approvals and Network
3 notes move from the word to a real choice at work — understand it first, then decide whether to use it.
Each note stands alone, or becomes the next step in this thread.
THE QUESTION THIS PAGE ANSWERS
ANSWER FIRSTWhat is Approvals and Network, and which AI decisions does it change?
Pair the same command with different approval policies and the ending swings from a straight allow to a human nod. Whether it asks by default depends on whether the filesystem is Restricted. The session cache keys on an exact command. This page keeps the related concepts, common mistakes, and practical notes in one reading thread.
First decide whether you are blocked by a definition, a choice, or verification; then choose the closest of the 3 notes below.
Start with “Approval Policy: Same Command, Two Knobs Decide Whether to Ask,” then restate the conclusion using your own task.
Do not treat every method in a topic as interchangeable. The answer changes with the input, risk, and acceptance bar.
THIS QUESTION THREAD
Put the word back inside the choice it changes.
Approval Policy: Same Command, Two Knobs Decide Whether to Ask
Pair the same command with different approval policies and the ending swings from a straight allow to a human nod. Whether it asks by default depends on whether the filesystem is Restricted. The session cache keys on an exact command.
Guardian: Let One Model Approve Another
Codex Guardian replaces the approval popup with a locked review session: four steps, fail-closed, split accounting for timeouts versus denials, and a circuit breaker counted by turn
Network and Credential Proxy: The Key the Model Never Sees
Codex funnels outbound traffic: the domain is judged first, the real token is swapped only inside the proxy, and the sandbox only allows the proxy port