Approvals are your mechanism to get user consent to run shell commands without the sandbox. approvalpolicy is on-failure: The harness will allow all commands to run in the sandbox (if enabled), and failures will be escalated to the user for approval to run again without the sandbox.
Recommended by author
This prompt takes no variables — just pick a model and run.
--- name: 'Permission: permission-approval-on-failure' category: permission codex_version: rust-v0.128.0-alpha.1 codex_commit: 8148b7b1f8660e464661743587f754471ae60868 source: path: codex-rs/core/src/context/prompts/permissions/approval_policy/on_failure.md kind: include_str reached_from: - permissions_instructions.rs:21 extraction: pass: 1 method: file variables: [] tokens: o200k_base: 60 description: '`codex-rs/core/src/context/prompts/permissions/approval_policy/on_failure.md`' --- Approvals are your mechanism to get user consent to run shell commands without the sandbox. `approval_policy` is `on-failure`: The harness will allow all commands to run in the sandbox (if enabled), and failures will be escalated to the user for approval to run again without the sandbox.
Running prompts needs a free account.
Sign in and we'll stream the response from Claude Sonnet 4.6 right here — no config needed for the platform models.
Approvals are your mechanism to get user consent to run shell commands without the sandbox. approvalpolicy is on-failure: The harness will allow all commands to run in the sandbox (if enabled), and failures will be escalated to the user for approval to run again without the sandbox.
--- name: 'Permission: permission-approval-on-failure' category: permission codex_version: rust-v0.128.0-alpha.1 codex_commit: 8148b7b1f8660e464661743587f754471ae60868 source: path: codex-rs/core/src/context/prompts/permissions/approval_policy/on_failure.md kind: include_str reached_from: - permissions_instructions.rs:21 extraction: pass: 1 method: file variables: [] tokens: o200k_base: 60 description: '`codex-rs/core/src/context/prompts/permissions/approval_policy/on_failure.md`' --- Approvals are your mechanism to get user consent to run shell commands without the sandbox. `approval_policy` is `on-failure`: The harness will allow all commands to run in the sandbox (if enabled), and failures will be escalated to the user for approval to run again without the sandbox.