How to pre-approve *specific* commands?

Codex Codex CLI
1

I want to pre-approve specific commands, not every command that shares the same prefix.

For example, I want to allow:
.\gradlew.bat compileKotlin

but not:

.\gradlew.bat compileKotlin && someDangerousCommand

However, Codex always suggests a rule that says not to ask again for commands that “start with” the given command. The rules documentation also seems to describe prefix-based matching only: (see rules documentation, I was not allowed to post a link)

Am I misunderstanding how this works, or is it currently not possible to allow only exact commands?

2

You can write a .rule file: