From 758e83015bb3f7c030733dfcd935d199ce731bf2 Mon Sep 17 00:00:00 2001
From: Lucenx9 <185146821+Lucenx9@users.noreply.github.com>
Date: Sun, 19 Apr 2026 01:14:00 +0200
Subject: [PATCH] docs(codex): clarify approval override example

---
 docs/plugins/codex-harness.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/docs/plugins/codex-harness.md b/docs/plugins/codex-harness.md
index b863cfcc633..4378e33d962 100644
--- a/docs/plugins/codex-harness.md
+++ b/docs/plugins/codex-harness.md
@@ -264,7 +264,8 @@ codex app-server --listen stdio://
 ```
 
 By default, OpenClaw asks Codex to request native approvals. You can tune that
-policy further:
+policy further, for example by tightening it and routing reviews through the
+guardian:
 
 ```json5
 {
@@ -274,7 +275,8 @@ policy further:
         enabled: true,
         config: {
           appServer: {
-            approvalPolicy: "on-request",
+            approvalPolicy: "untrusted",
+            approvalsReviewer: "guardian_subagent",
             sandbox: "workspace-write",
             serviceTier: "priority",
           },