andrewgu-oai e734a1a5c1
Ignore reusable command approvals for cyber models ( #37516 ) ...
## What changed
- Filter saved `allow` prefix rules from the execution policy for cyber-specialized models and models listed in `auto_review.ignore_rules`, while preserving prompt, forbidden, network, and host-executable policy entries.
- Apply the filtered policy consistently to permission instructions, shell commands, unified exec, and the zsh-fork backend.
- Limit cyber-model command approvals to one-time decisions without proposing reusable policy amendments. General models continue to honor saved prefixes, including after switching models within a thread.
## Testing
- Add policy-level coverage for filtering allow-prefix rules while retaining restrictive and network rules.
- Add end-to-end coverage across shell and unified exec paths, zsh-fork execution, user and automatic review, and model switching.
GitOrigin-RevId: f3bd3872424291b12354ec415f33986ec369a368
2026-08-08 00:59:39 +00:00
2026-07-29 13:53:15 +00:00
2026-06-09 12:48:04 -07:00
2026-07-23 19:19:35 +00:00
2026-07-21 22:44:43 +00:00
2026-08-06 02:30:18 +00:00
2026-07-29 13:53:15 +00:00
2026-08-08 00:59:39 +00:00
2026-08-04 15:23:43 +00:00
2026-07-21 08:50:21 +00:00
2026-08-07 23:43:14 +00:00
2026-07-30 19:47:30 +00:00
2026-08-04 15:23:43 +00:00
2026-07-29 18:29:26 +00:00
2026-08-07 18:05:17 +00:00
2026-07-21 08:59:41 +00:00
2026-06-11 18:16:39 -07:00
2026-07-30 21:49:53 +00:00
2026-06-13 21:43:39 -07:00
2026-08-04 22:23:40 +00:00
2026-08-07 13:54:24 +00:00
2026-08-05 18:09:26 +00:00
2026-08-05 18:09:26 +00:00
2026-07-21 08:28:51 +00:00
2026-06-11 18:16:39 -07:00
2026-08-07 21:10:49 +00:00
2026-08-07 21:10:49 +00:00
2026-08-07 23:27:39 +00:00
2026-08-05 16:09:01 +00:00
2026-08-07 19:56:29 +00:00
2026-07-30 21:49:53 +00:00
2026-08-07 18:33:46 +00:00
2026-06-15 20:10:53 -07:00
2026-08-07 19:36:52 +00:00
2026-08-04 22:58:02 +00:00
2026-08-08 00:59:39 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-08 00:59:39 +00:00
2026-08-04 16:28:46 +00:00
2026-08-07 16:20:38 +00:00
2026-08-07 11:30:17 +00:00
2026-06-05 15:41:13 -07:00
2026-08-07 03:40:06 +00:00
2026-08-07 17:54:41 +00:00
2026-08-07 17:54:41 +00:00
2026-07-20 06:13:29 +00:00
2026-08-07 21:36:33 +00:00
2026-08-07 13:54:24 +00:00
2026-08-07 23:49:12 +00:00
2026-08-07 19:56:29 +00:00
2026-07-31 21:37:56 +00:00
2026-07-23 23:35:29 +00:00
2026-05-28 23:09:55 -07:00
2026-08-05 20:23:35 +00:00
2026-08-07 03:30:29 +00:00
2026-08-07 18:33:46 +00:00
2026-07-31 04:20:56 +00:00
2026-06-12 19:52:49 +00:00
2026-08-07 01:30:07 +00:00
2026-07-22 04:17:34 +00:00
2026-08-07 02:30:18 +00:00
2026-08-06 03:11:42 +00:00
2026-08-07 22:41:20 +00:00
2026-07-17 20:52:42 +00:00
2026-08-05 14:20:59 +00:00
2026-08-04 22:07:56 +00:00
2026-08-05 20:03:13 +00:00
2026-08-06 03:57:10 +00:00
2026-07-30 04:26:36 +00:00
2026-08-07 00:28:32 +00:00
2026-08-05 04:54:33 +00:00
2026-05-25 17:26:10 -03:00
2026-07-22 19:14:11 +00:00
2026-08-07 14:08:13 +00:00
2026-08-07 18:33:46 +00:00
2026-08-07 19:36:52 +00:00
2026-08-06 03:11:42 +00:00
2026-08-06 03:11:42 +00:00
2026-07-30 22:45:04 +00:00
2026-05-26 20:59:47 -07:00
2026-08-04 15:14:57 +00:00
2026-07-23 21:50:17 +00:00
2026-06-25 13:56:08 -07:00
2026-08-07 16:20:38 +00:00
2026-08-07 19:56:29 +00:00
2026-08-04 03:49:53 +00:00
2026-08-07 14:08:13 +00:00
2026-08-07 01:26:42 +00:00
2026-08-05 20:03:13 +00:00
2026-08-07 23:43:14 +00:00
2026-08-07 20:10:08 +00:00
2026-07-22 16:18:08 +00:00
2026-06-13 21:43:39 -07:00
2026-07-24 00:16:42 +00:00
2026-07-27 18:37:11 +00:00
2026-07-09 17:31:44 -07:00
2026-08-07 23:27:39 +00:00
2026-08-07 21:36:33 +00:00
2026-07-28 20:49:22 +00:00
2026-07-11 03:27:51 +00:00
2026-07-29 13:53:15 +00:00
2026-07-30 04:26:36 +00:00
2026-06-04 09:16:03 -07:00
2026-05-26 20:59:47 -07:00
andrewgu-oai
e734a1a5c1