• gpt-5 is the default model!
• new --ask-for-approval on-request option where the model decides whether to prompt the user (which is somewhat of a balance between the existing on-failure and never) options
• new onboarding flow that uses --sandbox workspace-write and --ask-for-approval on-request as the configuration when users mark a folder is trusted (recommended default when working in a Git repo)