把每個 Codex surface 對應到控制。

Codex surface用途控制邊界信任前證據

01Prompt + working directory定義 task 與 repository contextGoal、context、constraints、done正確 root 與可重現 task

02Sandbox + approvals限制 generated commands 與 escalationsFilesystem、network、approval policy/status 與 least-privilege run

03AGENTS.md共享 durable repository guidanceGlobal、root、nested chainLoaded sources 與可執行 checks

04config.toml設定 user、project、profile defaultsPrecedence 與 trust gateSession 內檢查 effective config

05MCP連接外部 tools/contextTransport、auth、enabled tools、approvalsIdentity、failure path、窄 tool list

06Skills + plugins封裝與散佈重複 workflowsTrigger、scripts、dependencies、scopePositive/negative trigger tests

07Subagents平行處理 independent evidenceParent permission、ownership、result contract無 write collision 的 thread results

08codex exec + CINon-interactive stable workflowsSandbox、credentials、schema、trusted triggerMachine output 與隔離 writes