Skip to content

"Don't Trust" option blocks all writes instead of requesting approval #4940

Closed

Description

@vmotta8

What version of Codex is running?

v0.45.0

Which model were you using?

gpt-5-codex

What platform is your computer?

Darwin 23.6.0 arm64

What steps can reproduce the bug?

  1. Start Codex in a directory
  2. When the trust directory prompt appears, select option 2: "No, ask me to approve edits and commands"
  3. Ask Codex to make any file edit, for example: "Update the README.md and add a Hello below the title"

What is the expected behavior?

Codex should ask for approval before making the edit, then proceed with the operation after I approve it.

What do you see instead?

Codex refuses to perform any write operations, saying it's in a "read-only workspace":

• I'm currently in a read-only workspace, so I can't modify README.md.
  If you switch me to a writable mode (or apply the change yourself),
  I'll be happy to add the "Hello" right under the title.
Image

Additional information

This might be related to #2005, which also involved approval prompts and sandbox behavior.

The "Don't Trust" option should enable approval mode, not block all operations entirely.

Activity

  1. github-actions commented on Oct 8, 2025

    @github-actions
    Contributor

    Potential duplicates detected. Please review them and close your issue if it is a duplicate.

    Powered by Codex Action

  2. vmotta8 commented on Oct 8, 2025

    @vmotta8
    ContributorAuthor

    I looked into this and found that the "Don't Trust" option wasn't applying the approval policy correctly. Opened a PR to fix it: #4941

  3. added a commit that references this issue on Nov 14, 2025
    89ecc00
  4. added a commit that references this issue on Dec 2, 2025
    2304b33
  5. added a commit that references this issue on Jun 27, 2026
    f62980c
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingsandboxIssues related to permissions or sandboxing

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions