The definitive guide to Codex CLI: from first install to production ...

workspace-write lets Codex write within your project directory and run commands, but can't touch anything outside it. Network access is disabled ...