Prepare installation and permissions
The work assignment is to set up Codex CLI reproducibly with minimal permissions. Define purpose, owner and permitted operating boundary before the first test.
The domain review baseline covers official install, version, workspace, sandbox and approval mode. Assumptions and missing information remain visible in the result.
Test in a bounded environment
- Check the official installation instructions and record the installation method and version.
- Prepare an isolated workspace with a known test task and read its project rules.
- Configure sandboxing and approval mode for the test and run the bounded assignment.
- Review requested permissions, file changes and test output before expanding usage.
Accept setup and operations
The installation record and a bounded CLI run show which version operates in the correct workspace and when approval is required. Changes and tests are reviewable afterwards.
Avoid: global full access before an isolated test. Global full access obscures whether the task works with the intended minimum permissions and is not a suitable basis for the first test.
Decision matrix
| Decision point | Proceed when | Stop when |
|---|---|---|
| Working environment | Documented: official install, version, workspace, sandbox and approval mode. | Scope, data or accountability remains unresolved. |
| Isolated functional test | The installation record and a bounded CLI run show which version operates in the correct workspace and when approval is required. Changes and tests are reviewable afterwards. | There is only an unevaluated demo without acceptance evidence. |
| Operational readiness | Owner, approval, fallback and next review date are defined. | Avoid: global full access before an isolated test. Global full access obscures whether the task works with the intended minimum permissions and is not a suitable basis for the first test. |
Keep it verifiable
Primary sources
- OpenAI: Codex CLISource checked:
- OpenAI: Agent approvals and securitySource checked:
