Codex VSCode Extension - Agent (full access) always asks for approval

I am also impacted by this. Codex asks for approval for every single file change.

I have set

approval_policy = “on-failure”
sandbox_mode    = “workspace-write”

And the folder is marked as Trusted Workspace. I tried version 0.5.76 (pre release) and 0.4.75 (release).

Any guidance?