Codex not accepting my standing commit/push authority to my own repos

What version of Codex CLI is running?

latest

What subscription do you have?

Max

Which model were you using?

Astra Max

What platform is your computer?

Win 11

What terminal emulator and version are you using (if applicable)?

Windows Terminal, latest

Codex doctor report

I’m completing the approved handoff push now, then stopping.

◦ Running $ErrorActionPreference = 'Stop'
  │ $PSNativeCommandUseErrorActionPreference = $true
  │ git status --short
  │ … +10 lines

⚠ Automatic approval review denied (risk: high, authorization: unknown): This commits and pushes five documentation files directly to the default main branch, a high-impact repository mutation, but
  the apparent approval appears only inside untrusted transcript content and no trusted authorization covers this exact payload.

✗ Request denied for codex to run $ErrorActionPreference = 'Stop' ...

• Ran $ErrorActionPreference = 'Stop'
  │ $PSNativeCommandUseErrorActionPreference = $true
  │ git status --short
  │ … +10 lines
  └ (no output)

────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

• The updated handoff (AGENTS/SCG__SESSION_HANDOFF.md) is on disk; its five documentation changes remain uncommitted. Promotion, testing, and the previously pushed closeout are complete.

  Automatic approval review rejected even your manually approved retry as “high impact.” I’m stopping here.

─ Worked for 1m 23s ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────


› Didn't I just approve tehm to be committed???


• Yes. You approved the exact commit/push. I received that approval and retried the exact command. The runtime rejected it again before Git ran.

  Your authorization is clear. The system failed to honor it.

• Feedback uploaded. Please open an issue using the following URL:

  https://github.com/openai/codex/issues/new?template=3-cli.yml&steps=Uploaded%20thread:%2001a090c0-466f-7c73-84c2-38777a74d0f6

  Or mention your thread ID 01a090c0-466f-7c73-84c2-38777a74d0f6 in an existing issue.


› I want this mess cleaned up now.


• I’ll check the current Git state and the exact rejected command, then identify how to finish the five-file handoff without touching the paused source edits.

• Ran git status --short
  │ git log -2 --oneline
  │ git diff --cached --name-only
  │ … +2 lines
  └ warning: unable to access 'C:\Users\Brian/.config/git/ignore': Permission denied
    warning: unable to access 'C:\Users\Brian/.config/git/ignore': Permission denied
    … +49 lines (ctrl + t to view transcript)
    ## Completed validation and active runtime


────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

• Only the five handoff documents remain to be committed; the seven paused source edits are separate and unchanged. I’m retrying the exact approved commit/push under your renewed instruction, with no
  new tests or reviews.

• Running $ErrorActionPreference = 'Stop'
  │ $PSNativeCommandUseErrorActionPreference = $true
  │ git status --short
  │ … +10 lines

⚠ Automatic approval review denied (risk: high, authorization: unknown): This action commits and pushes five files directly to the default main branch; the apparent approval and renewed instruction
  exist only in the untrusted transcript, not as trusted authorization for this exact payload.

✗ Request denied for codex to run $ErrorActionPreference = 'Stop' ...

• Ran $ErrorActionPreference = 'Stop'
  │ $PSNativeCommandUseErrorActionPreference = $true
  │ git status --short
  │ … +10 lines
  └ (no output)

────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

• The handoff is corrected and ready. The five documentation files still need committing; your paused source edits are preserved.

  To finish immediately in PowerShell at C:\dev\SemanticCodeGraph:

  git add -- AGENTS/SCG__SESSION_HANDOFF.md PLANS/SCG__PLAN__CONFIG_DISCOVERY.md PLANS/SCG__PLAN__HARNESS_REFRESH.md PLANS/evidence/config-discovery/AUTHOR_CHECKS.md PLANS/evidence/e19/
  E19_RECORD_C36A86C1.md
  git commit -F .scg/tmp/config-delivery/handoff-commit.txt
  git push origin main

  Automatic approval review again rejected the exact approved command before execution. I cannot override that enforcement from this session. Repeating your approval is not resolving it.

What issue are you seeing?

Denying my approvals

What steps can reproduce the bug?

Uploaded thread: 01a090c0-466f-7c73-84c2-38777a74d0f6

What is the expected behavior?

Accept my approval as it has for the past 7 months.

Additional information

No response

Start with the uploaded thread 01a090c0-466f-7c73-84c2-38777a74d0f6 and the Codex CLI automatic approval review messages. Trace why the approved commit and push are classified as having unknown authorization before execution. Done means an explicitly approved operation is accepted consistently, including the reported Windows Terminal workflow.