Skip Codex Git trust check

2026-07-19 18:51:22 +02:00
parent f68d7cbc32
commit 8eeac8f76f
3 changed files with 18 additions and 3 deletions
@@ -57,8 +57,11 @@ file-based Compose secrets.
 Planning/review commands can only read their workflow clone and have no shell
 network access. Implementation/fix commands can edit the clone but cannot
 modify `.git`; they can reach public internet destinations while private and
-loopback destinations remain blocked. Git credentials exist only in the
-service-owned clone/push subprocess and are not inherited by Codex turns.
+loopback destinations remain blocked. Codex's interactive Git trust check is
+skipped because every turn runs non-interactively against a service-owned clone;
+the configured filesystem and network permissions still apply. Git credentials
+exist only in the service-owned clone/push subprocess and are not inherited by
+Codex turns.

 ## State and recovery