Chapter C68 · Interactive Course

Guide Codex and inspect its reach

AGENTS.md discovery, overrides, skills, connected servers, the three permission dials and surviving compaction.

Start chapter in web app

Core Learning Concept

Inspect the task’s guidance, skills, connected capabilities, and execution permissions as separate layers. Determine which instructions apply to this location and whether required information is actually included. Use the supplied setup evidence to explain unexpected behavior before changing configuration or broadening access.

What You’ll Learn in This Chapter

  1. AGENTS.md supplies applicable guidance

    Activity 1 of 7 · 5 min

    Identify project conventions Codex discovers.

    Codex discovers applicable AGENTS.md files along the project directory tree. These instructions establish project commands and conventions. Keep them concise and verifiable, since guidance depends on folder scope rather than repository existence.

    Start activity →

  2. Overrides can explain surprising guidance

    Activity 2 of 7 · 5 min

    Inspect a supplied instruction-discovery chain.

    AGENTS.override.md and fallback filenames alter which guidance Codex loads. Within a directory, overrides replace parent rules rather than merging text. Check discovery paths against official rules when instructions produce unexpected agent behaviors.

    Start activity →

  3. Skills reuse a task procedure

    Activity 3 of 7 · 5 min

    Choose an applicable skill and inspect its result.

    Skills package task-specific instructions and resources. Codex can use a skill when explicitly selected or when the request matches its description under the host’s rules. Discovery metadata and full instructions are loaded at different stages. Check that the skill fits the task and inspect its resulting work.

    Start activity →

  4. MCP adds connected capabilities

    Activity 4 of 7 · 5 min

    Inspect a configured server and its available tools.

    An MCP connection can make external tools or context available to Codex through a configured server. It does not automatically authorize every operation or prove the server was used. Verify the capability, access, call result, and destination state appropriate to the task. Connected material still needs interpretation and checking.

    Start activity →

  5. Permissions constrain the task

    Activity 5 of 7 · 5 min

    Distinguish file access, network access and approval behavior.

    Permissions and sandboxes restrict filesystem, network, and execution operations under configured policies. Text prompts cannot enforce security boundaries. Inspect effective permission modes directly rather than assuming instructions alone prevent unwanted actions.

    Start activity →

  6. Context is selected and can be compacted

    Activity 6 of 7 · 5 min

    Keep a concise task record across a longer run.

    Codex works from selected context including instructions, files, and tool outputs. Long sessions compact earlier dialogue to fit limits. Important details require rechecking against source files rather than relying entirely on compacted memories.

    Start activity →

  7. Inspect the Codex task setup

    Activity 7 of 7 · 6 min

    Read a supplied guidance chain, skill selection and server status, and say which files and services the task can actually use.

    Start activity →