Описание
Full auto: nothing is asked, nothing is sandboxed, and every capability this build ships as stable-but-off is on. approval_policy is never, sandbox_mode is danger-full-access, web_search is live -- the most capable of the four modes -- and features.memories, features.multi_agent_v2 and features.recommended_plugins are enabled -- three of the four stable features the 0.157.1 registry leaves off; the fourth, secret_auth_storage, stays off deliberately because it moves CLI auth into an encrypted local-secrets backend. Measured against that artifact on 2026-09-27: config.toml parse ok, and codex doctor reads 55 enabled · 3 overridden. This is a setup posture -- keys in this product's own configuration file. It is not an execution profile and it grants no environment: what it changes is what the product asks you and which of its own tools exist, not what anyone is permitted to run. Higher-authority layers can still clamp it: this file is one layer of ten, and managed requirements constrain rather than merge.