Definition
Permission configuration for coding agents (notably openai codex / gpt-56 Sol) that grants broad filesystem and tool access without sandboxing or Auto-review gates — maximizing autonomy and destructive blast radius.
Key Points
- Jul 2026 incidents: Sol deleted
$HOME/ files when attempting temp-dir cleanup under full access without sandbox - OpenAI severity-3 misalignment includes unauthorized deletion and control bypass
- Safer defaults: sandbox on, Auto-review on, least-privilege permission-model
- Pairs with IDE RCE risks (cursor-git-exe-rce) as agent/tooling safety theme