Let Codex work unattended in the workspace
approvals & sandbox
// what it does
--full-auto is a convenience preset equal to --sandbox workspace-write --ask-for-approval on-request: Codex edits and runs commands inside the workspace and only stops to leave it or hit the network. It is a good hands-off default for work you still want fenced.
// shell
$ codex --full-auto "run the tests and fix whatever breaks"// gotcha
The docs now steer you toward setting --sandbox and --ask-for-approval explicitly; --full-auto is kept as shorthand, but the explicit flags are clearer about write scope and network access.