Won Park 0d78fa8846 Restrict Guardian reviewer tools (#32945) ...

## What changed

- Limit Guardian reviewer sessions with an environment to `exec_command`,
  `write_stdin`, and `view_image`.
- Exclude general tool sources from Guardian reviewer tool planning.

## Testing

- Extend the Guardian request snapshot test to assert the exact model-visible
  tool list.

GitOrigin-RevId: 80ba7011c23c32d163aaad906087fac396cc70fa

2026-07-14 04:15:19 +00:00

..

snapshots

Align Guardian reviews with session configuration (#32747)

2026-07-13 09:44:56 +00:00

approval_request.rs

feat(guardian): include connected account email in app reviews (#27045)

2026-06-23 20:33:44 +00:00

metrics.rs

Add Guardian review metrics (#24897)

2026-05-28 14:07:25 +02:00

mod.rs

[codex] Retry transient Guardian review failures (#27062)

2026-06-10 11:46:57 -07:00

policy_template.md

Align Guardian reviews with session configuration (#32747)

2026-07-13 09:44:56 +00:00

policy.md

Update guardian output schema (#17061)

2026-04-08 15:47:29 -07:00

prompt.rs

Align Guardian reviews with session configuration (#32747)

2026-07-13 09:44:56 +00:00

review_session.rs

Use model catalog policies for Guardian auto review (#32875)

2026-07-13 21:25:28 +00:00

review.rs

Use model catalog policies for Guardian auto review (#32875)

2026-07-13 21:25:28 +00:00

tests.rs

Restrict Guardian reviewer tools (#32945)

2026-07-14 04:15:19 +00:00