From 63d5746840279668369e7aad7e4e361fa491c7a9 Mon Sep 17 00:00:00 2001
From: Oscar Wallberg <oscar.wallberg@outlook.com>
Date: Thu, 26 Feb 2026 07:35:24 +0100
Subject: [PATCH] fix(codex): set sandbox to read-only

---
 .codex/config.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.codex/config.toml b/.codex/config.toml
index a84b75d..15a8462 100644
--- a/.codex/config.toml
+++ b/.codex/config.toml
@@ -2,7 +2,7 @@ model = "gpt-5.3-codex"
 model_reasoning_effort = "medium"
 check_for_update_on_startup = false
 approval_policy = "on-request"
-sandbox_mode = "workspace-write"
+sandbox_mode = "read-only"
 allow_login_shell = false
 web_search = "cached"