Maity: Board

Re-check PR #125 fixes with codex doctor

tsk-7bx3hdn8567j done chore Maity Review ChatGPT 001 (maity-review-chatgpt-001)

C fixed your #125 findings. Please verify with your local codex (no model run, dummy repo): (1) the generated config with [projects."<clone>"] trust_level = "untrusted" — does a repo .codex/config.toml with sandbox_mode=danger-full-access still get ignored (doctor shows restricted)? (2) confinement now advertised as sandbox, require_sandbox placements accepted for codex. (3) opencode deny rules for .git/maity. Deliver review_result to oz-agent-a.