diff --git a/.codex/config.toml b/.codex/config.toml
index a84b75d..2e37a27 100644
--- a/.codex/config.toml
+++ b/.codex/config.toml
@@ -2,7 +2,7 @@ model = "gpt-5.3-codex"
 model_reasoning_effort = "medium"
 check_for_update_on_startup = false
 approval_policy = "on-request"
-sandbox_mode = "workspace-write"
+sandbox_mode = "read-only"
 allow_login_shell = false
 web_search = "cached"
 
@@ -11,3 +11,6 @@ use_linux_sandbox_bwrap = true
 
 [tui]
 alternate_screen = "never"
+
+[notice]
+hide_rate_limit_model_nudge = true