diff --git a/.github/workflows/agents-codex.yml b/.github/workflows/agents-codex.yml
index b0b7a87..d5c0346 100644
--- a/.github/workflows/agents-codex.yml
+++ b/.github/workflows/agents-codex.yml
@@ -85,7 +85,6 @@ jobs:
           model: ${{ inputs.model }}
           allow-users: ${{ inputs.allow_users }}
           codex-home: ${{ runner.temp }}/codex-home
-          codex-args: "--ask-for-approval never"
           output-file: .agents_suggestions.json
           output-schema: |
             {
@@ -168,7 +167,7 @@ jobs:
           model: ${{ inputs.model }}
           allow-users: ${{ inputs.allow_users }}
           codex-home: ${{ runner.temp }}/codex-home
-          codex-args: "--ask-for-approval never"
+          codex-args: "--full-auto"
           prompt: |
             You are updating AGENTS.md files for ${{ github.repository }} PR #${{ github.event.pull_request.number }}.
 
diff --git a/README.md b/README.md
index 2333a78..43a57c2 100644
--- a/README.md
+++ b/README.md
@@ -82,4 +82,6 @@ Notes
 
 - Runs as the caller repo with `contents: write` + `pull-requests: write` only.
 - Avoids `pull_request_target` (no escalated token from forks).
-- Apply mode validates only `AGENTS.md` paths mutate before committing.
+- Apply mode validates only `AGENTS.md` paths mutate before committing
+
+ok
diff --git a/examples/agents-codex-action.yml b/examples/agents-codex-action.yml
index 28e12e0..4ddcc80 100644
--- a/examples/agents-codex-action.yml
+++ b/examples/agents-codex-action.yml
@@ -24,7 +24,6 @@ jobs:
           openai-api-key: ${{ secrets.OPENAI_API_KEY }}
           sandbox: read-only
           model: gpt-5-codex
-          codex-args: "--ask-for-approval never"
           output-file: .agents_suggestions.json
           output-schema: |
             {