docs: 文件访问默认边界改为 per-agent opt-in 的表述同步（zh+en）#30
Conversation
- privacy：「默认只能访问获准工作区」改为默认可访问本机文件 + 敏感路径硬保护 + 可开启「仅允许访问工作目录」收敛边界 - ai-approval：文件范围作为审批不可越过的硬防线改为开启限制时成立，默认态硬防线 是敏感路径保护 - builtin-tools-reference：工作目录改为默认操作上下文，开启限制后才是文件访问边界 （英文版此前缺该说明句，一并补齐） 对应主仓库 PR #1212（agent.json file_security.restrictToWorkDirs，缺省 false）
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 366c4c5a0c
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: df5e13bb2e
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
1 participant
中文
主仓库 PR desirecore/desirecore#1212（ADR-044）把文件访问工作目录白名单改为逐智能体 opt-in（agent.json
file_security.restrictToWorkDirs，默认不拦截；敏感路径保护与工具审批不变）。本 PR 同步三处对外表述（中英双语，共 6 个文件）：pnpm build通过（onBrokenLinks: throw）。English
Main-repo PR desirecore/desirecore#1212 (ADR-044) made the file-access work-dir whitelist a per-agent opt-in (
file_security.restrictToWorkDirs, default off; sensitive-path protection and tool approval unchanged). This PR updates the three user-facing statements accordingly in both zh and en (6 files): privacy policy default-access wording, AI-approval hard-boundary wording, and the built-in tools reference note on work directories (the en page was missing that note and now includes it).pnpm buildpasses.