rubicks-112 81df6475b2 fix(codex): restrict .codex/config.toml to non-escalating keys ...

The project-scoped reference file shipped an active [profiles.yolo] block
with approval_policy = "never" and exposed MCP servers / approval_policy /
sandbox_mode / notify / profiles.* keys that override the user's own
~/.codex/config.toml when the repo is trusted. AgentShield flags this as
codex-approval-never (CRITICAL) and codex-project-config-escalates (HIGH).

Restrict the project-scoped file to model selection, persistent
instructions, features, and role definitions. Move every other key into a
clearly-marked USER-LEVEL REFERENCE appendix as commented-out examples so
installs still ship a usable template without overriding user policy.

Verified locally with ecc-agentshield scan --path . against .codex/config.toml:
  * pre-fix:  2 critical/high findings
  * post-fix: 0 critical/high findings

Refs: ARU-10 (ECC-SEC-1.1 review CLEAR), ARU-18 (this PR).

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-09-28 12:42:16 +03:00

..

agents

fix(codex): update bundled defaults to GPT 5.5 (#2132)

2026-06-07 13:37:46 +08:00

AGENTS.md

fix(install): harden universal setup release path (#2888)

2026-08-30 18:54:00 -04:00

config.toml

fix(codex): restrict .codex/config.toml to non-escalating keys

2026-09-28 12:42:16 +03:00