Default Permissions mode in Codex allows reading and modifying files and running routine local commands within the current workspace, but requires confirmation for internet access or writes outside the workspace