jif dbe9dac1ae Route escalated commands through synchronous Guardian review (#40005) ...

## Why

Commands requesting `sandbox_permissions=require_escalated` need a full Guardian review even when they are not marked as retries.

## What changed

- Treat escalated command requests, along with retries, as requiring synchronous Guardian review.
- Bypass extension approval and Guardian V2 shortcuts for these requests.

## Testing

Add an integration test that installs an auto-approving extension and verifies that an escalated command still reaches Guardian and honors its denial.

GitOrigin-RevId: 30eed273460f3c3c6b24d1ce2d29889e34513afd

2026-08-21 20:45:42 +00:00

..

common

Deduplicate zsh fork test setup (#39790)

2026-08-20 19:43:54 +00:00

remote_env_windows

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

suite

Route escalated commands through synchronous Guardian review (#40005)

2026-08-21 20:45:42 +00:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_headers.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00