# Optional: merge into ~/.codex/config.toml (or pass per-run with -c).
# Enforcement lives in vr-only.rules (~/.codex/rules/); this only centralizes
# the log and, if you want, tightens approvals for everything unmatched.

# approval_policy = "untrusted"

[shell_environment_policy]
inherit = "all"

[shell_environment_policy.set]
# one shared vr log for every repo codex touches
VR_LOG = "/Users/goblin/00-projects/0x4200.cafe/vr-agent-logger/vr-log.jsonl"