diff --git a/.env.example b/.env.example
index 0d72ac9..c4d8b98 100644
--- a/.env.example
+++ b/.env.example
@@ -18,7 +18,7 @@ CODEX_APP_SERVER_MODEL=gpt-5.5
 CODEX_MODEL_REASONING_EFFORT=high
 CODEX_SPEED_MODE=standard
 CODEX_READONLY_SANDBOX=read-only
-CODEX_WRITE_SANDBOX=workspace-write
+CODEX_WRITE_SANDBOX=danger-full-access
 CODEX_RESUME_JSON_FLAG_STYLE=before_resume
 
 # Optional: set this only if you want plain messages to behave like /ask.
diff --git a/README.md b/README.md
index a43c73a..51584e5 100644
--- a/README.md
+++ b/README.md
@@ -39,6 +39,10 @@ Use `/work <prompt>` for write-capable tasks such as editing files, committing,
 pushing, or opening pull requests. Plain text and `/ask` stay read-oriented by
 default.
 
+On Synology/NAS Docker deployments, keep `CODEX_WRITE_SANDBOX=danger-full-access`
+for `/work`. The stricter `workspace-write` sandbox may fail with bubblewrap
+namespace errors inside the container.
+
 `/settings`, `/models`, `/schedules`, `/records`, and `/sessions` return inline
 buttons, so you can change speed/model/reasoning settings, delete schedules,
 manage personal records, and switch or archive sessions without copying ids.
diff --git a/deploy/make-env.ps1 b/deploy/make-env.ps1
index e19b537..26ddabf 100644
--- a/deploy/make-env.ps1
+++ b/deploy/make-env.ps1
@@ -28,7 +28,7 @@ BOT_WORKSPACE_ROOT=$WorkspaceRoot
 CODEX_BIN=codex
 CODEX_TIMEOUT_SECONDS=1800
 CODEX_READONLY_SANDBOX=read-only
-CODEX_WRITE_SANDBOX=workspace-write
+CODEX_WRITE_SANDBOX=danger-full-access
 CODEX_RESUME_JSON_FLAG_STYLE=before_resume
 ALLOW_PLAIN_TEXT=true
 "@ | Set-Content -Path $envPath -Encoding UTF8