The safeguards map / 3.2 Agent harnesses
OpenAI Codex CLI
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
An open-source local coding agent with an OS-enforced sandbox mode and an approval policy that decides when it must stop and ask the user.
Where it sits
3.2 Agent harnesses (primary): Applies a sandbox mode and an approval policy to the actions the agent takes locally, and stops to ask the user before acting outside them.
Codex CLI is a coding agent from OpenAI that runs locally on your computer.
captured
Locally, Codex uses an OS-enforced sandbox that limits what it can touch (typically to the current workspace), plus an approval policy that controls when it must stop and ask you before acting.
captured
Approval policy : When Codex must ask you before it executes an action
captured
Facts
- Concern
- safetysecurity
- Names the law
- no
- Subject
- agent
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
- Can the agent bypass it
- depends
Handoffs
produces Runtime records: OpenTelemetry (OTel) log events
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.