Ankush Gupta 89650c66f2 Require synchronous review for sensitive MCP actions (#41094) ...

## What changed

- Recognize `codex_sensitive_action: true` on MCP approval elicitations.
- Route marked actions to the synchronous Guardian reviewer instead of extension fast approval. Absent or false values preserve the existing path.
- Cover ordinary and strict auto-review configurations, including marked, unmarked, and explicitly false metadata.

GitOrigin-RevId: dce13d1696568ca81c8d2b08a7ef0d5f13e155bf

2026-08-27 08:44:54 +00:00

..

snapshots

Track permission instructions in world state (#33944)

2026-07-18 02:45:55 +00:00

tests

Add developer instructions for persistent mode (#41050)

2026-08-27 04:58:21 +00:00

code_mode_warning_tests.rs

chore: warn when Code Mode lacks model metadata (#29490)

2026-06-23 01:15:11 +00:00

code_mode_warning.rs

chore: warn when Code Mode lacks model metadata (#29490)

2026-06-23 01:15:11 +00:00

context_window.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

elicitation_holders_tests.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

environment.rs

Validate step settings against proposed permissions (#40647)

2026-08-25 17:27:04 +00:00

extension_metrics.rs

Add Guardian v2 approval review metrics (#39224)

2026-08-18 16:27:54 +00:00

handlers.rs

Expose resumable misalignment details through app server (#40952)

2026-08-26 18:42:44 +00:00

inject.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

input_queue.rs

Support standalone function outputs in turn routing (#40991)

2026-08-26 22:48:37 +00:00

mcp_prewarm.rs

Refresh MCP runtimes across thread startup (#35204)

2026-07-24 15:06:02 +00:00

mcp_refresh.rs

Honor attachment-owned permissions for MCP servers (#40728)

2026-08-25 22:50:49 +00:00

mcp_runtime.rs

Attach verified access context to eligible plugin MCP calls (#41005)

2026-08-27 00:02:26 +00:00

mcp_tests.rs

Use model-specific auto-review outcome instructions (#39741)

2026-08-20 16:52:16 +00:00

mcp.rs

Require synchronous review for sensitive MCP actions (#41094)

2026-08-27 08:44:54 +00:00

mod.rs

Track Guardian reviewer turn and tool analytics (#41023)

2026-08-27 02:19:10 +00:00

multi_agents.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

review.rs

Add per-turn cyber access program selection (#40687)

2026-08-25 19:54:52 +00:00

rollout_budget.rs

Use provider-reported rollout budget units (#36715)

2026-08-03 09:46:38 +00:00

rollout_reconstruction_tests.rs

Record reviewed actions with security risk scores (#40901)

2026-08-26 15:02:21 +00:00

rollout_reconstruction.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

session.rs

Track Code Mode tool call metadata completeness (#41058)

2026-08-27 06:03:29 +00:00

step_activation_tests.rs

Add per-turn cyber access program selection (#40687)

2026-08-25 19:54:52 +00:00

step_activation.rs

Add live turn settings updates (#40653)

2026-08-25 17:44:50 +00:00

step_context.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

step_settings_tests.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

step_settings.rs

Use step settings for MCP request metadata (#40807)

2026-08-26 05:58:04 +00:00

tests.rs

Track Code Mode tool call metadata completeness (#41058)

2026-08-27 06:03:29 +00:00

thread_settings.rs

Expose resumable misalignment details through app server (#40952)

2026-08-26 18:42:44 +00:00

time_reminder.rs

Enable clock tools for persistent reasoning turns (#40942)

2026-08-26 18:06:12 +00:00

token_budget.rs

Rename the history notes extension config option (#39830)

2026-08-21 01:51:48 +00:00

turn_context.rs

Expose resumable misalignment details through app server (#40952)

2026-08-26 18:42:44 +00:00

turn_input_tests.rs

Support standalone function outputs in turn routing (#40991)

2026-08-26 22:48:37 +00:00

turn_input.rs

Support standalone function outputs in turn routing (#40991)

2026-08-26 22:48:37 +00:00

turn_suspension.rs

Add unfinished root turn suspension (#40038)

2026-08-22 00:42:19 +00:00

turn_tests.rs

Refresh tracing interest in the token estimate test (#38400)

2026-08-13 16:08:34 +00:00

turn.rs

Expose response usage metadata in completion events (#41087)

2026-08-27 07:50:05 +00:00

world_state.rs

Add developer instructions for persistent mode (#41050)

2026-08-27 04:58:21 +00:00