Do Codex and Claude Code auto-approve features actually keep you safe? A researcher says the trust model is broken
Aaroth · x · 2026-09-15
Aaron Roth questions the auto-approve feature in Codex and Claude Code: it stops asking you for permissions but makes you feel safe by having a reviewer agent do the gating. His critique: the premise is asking an agent for permission — but if you don't trust the driver agent, why should you trust the review agent? Both may have utility functions misaligned with yours, so the approval layer itself may be the weak link.
More from coding & agent
- awa-video-reel: free Claude Code skill auto-edits shorts and records website B-roll — TawohAwa · 2026-11-02
- Econ PhD Job Market Database Hits 900+ Candidates, Open to Codex and Claude Code — aniketapanjwani · 2026-11-02
- Cron works by hand, fails on schedule: a 7-point debugging checklist — petrusenko_max · 2026-11-02
- Local quants vs Claude on 9 real private bugs: 3-bit costs thinking time, not score — FeydRowan · 2026-11-02
- Build products for AI, not humans: MCP lets Claude Code run everything — gefei55 · 2026-11-02
- Solo dev launches hosted MCP server with 31 tools scheduling to 20+ social networks — troyizzle · 2026-11-02