It has had automode for a bit now. I use it every day at work.

AFAIK it's just yolo mode, which doesn't actually do any checks like Claude Code's auto-mode (which has a model checking all commands for safety).

No, it says “auto approved” after every evaluated command. Does it work? No idea, I can’t think of a time it ever stopped, but I’m also not ever doing anything dangerous with it. It does use another model to evaluate the commands though.

"Approve for me" used to work without issue for me when GPT 5.5 was the latest model.

Nowadays it routinely rejects "git push" to the project's repository.

Put it in an isolated container and set it to YOLO

I don't even put it in a container. I just yolo it. It hasn't done anything bad so far. My logic is that if it nukes my filesystem then I deserve it.