> Codex did surface permission prompts for the add, commit, and push. It didn't run them fully invisibly. So — didn't I approve this? Operator error exists wit

> Codex did surface permission prompts for the add, commit, and push. It didn't run them fully invisibly. So — didn't I approve this? Operator error exists with or without AI. Installing any dev tool that could exfiltrate your information means you are responsible for securing your environment. Use a devcontainer. You can find starting examples on the official claude code and codex github repos. Configuring a firewall script to block egress. That being said, you will likely allowlist openAI domains so I'm not certain if the sites feature will be blocked. Worth testing.