guard reviews against issue rediscovery

codex/config.toml

@@ -40,6 +40,25 @@ glob_scan_max_depth = 5
 ".git" = "read"
 "**/*.env" = "deny"
 
+[permissions.agentci-review]
+description = "Review scoped workflow material and query Gitea with tea without editing files."
+
+[permissions.agentci-review.filesystem]
+":minimal" = "read"
+glob_scan_max_depth = 5
+
+[permissions.agentci-review.filesystem.":workspace_roots"]
+"." = "read"
+".git" = "read"
+"**/*.env" = "deny"
+
+[permissions.agentci-review.network]
+enabled = true
+allow_local_binding = false
+
+[permissions.agentci-review.network.domains]
+"*" = "allow"
+
 [permissions.agentci-write]
 description = "Edit a workflow repository without changing Git metadata."