Skip to content

Align Guardian reviews with session configuration - #32747

Merged
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/eb83571ef61f7b4e854c12e13e7163c6fab43f00
Jul 13, 2026
Merged

Align Guardian reviews with session configuration#32747
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/eb83571ef61f7b4e854c12e13e7163c6fab43f00

Conversation

@copyberry

@copyberry copyberry Bot commented Jul 13, 2026

Copy link
Copy Markdown

Align Guardian reviews with session configuration

What changed

  • Include permission instructions in Guardian review requests and let the review model use its configured tool mode and standard tool plan instead of a Guardian-specific direct-tool override.
  • Refine the Guardian policy for tenant policy precedence, authorization scoring, prompt-injection handling, read-only investigation, and post-denial user approval.
  • Simplify low-risk allow responses to {"outcome":"allow"} regardless of authorization scoring.

Testing

  • Update Guardian request-layout snapshots to cover the permission instructions included in initial and follow-up reviews.

## What changed

- Include permission instructions in Guardian review requests and let the review model use its configured tool mode and standard tool plan instead of a Guardian-specific direct-tool override.
- Refine the Guardian policy for tenant policy precedence, authorization scoring, prompt-injection handling, read-only investigation, and post-denial user approval.
- Simplify low-risk allow responses to `{"outcome":"allow"}` regardless of authorization scoring.

## Testing

- Update Guardian request-layout snapshots to cover the permission instructions included in initial and follow-up reviews.

GitOrigin-RevId: eb83571ef61f7b4e854c12e13e7163c6fab43f00
@copyberry
copyberry Bot force-pushed the copyberry/codex-internal-to-codex-oss/eb83571ef61f7b4e854c12e13e7163c6fab43f00 branch from b871bd2 to ea0fd84 Compare July 13, 2026 09:46
@copyberry
copyberry Bot merged commit ea0fd84 into main Jul 13, 2026
14 of 32 checks passed
@copyberry
copyberry Bot deleted the copyberry/codex-internal-to-codex-oss/eb83571ef61f7b4e854c12e13e7163c6fab43f00 branch July 13, 2026 09:47
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 13, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants