More likely the harness than the model or a search deal. In Claude Code, WebFetch prompts for permission per domain and WebSearch is a separately gated tool, so

More likely the harness than the model or a search deal. In Claude Code, WebFetch prompts for permission per domain and WebSearch is a separately gated tool, so the cheapest path for the agent is almost always the files already in the repo. Codex has no equivalent friction in front of a fetch. Worth checking against your own permission settings before reading it as a model preference: allowlist a domain and the same agent will reach for it a lot more.