# Explicit Codex CLI profile: codex -p strict
approval_policy = "on-request"
sandbox_mode = "read-only"
web_search = "cached"