Document the Responses API proxy reqwest exception (#36043)

## What changed

Classify `codex-responses-api-proxy` as an intentional `reqwest` exception in
`deny.toml` instead of a temporary migration exception. The proxy independently
owns its blocking upstream HTTP transport, and the allowed wrapper set remains
unchanged.

GitOrigin-RevId: 3db3281a13d67c9514051ea0009013ce50c439e6
This commit is contained in:
Celia Chen
2026-07-29 22:56:36 +00:00
committed by copyberry
parent 3e3ae08839
commit 6493417150

View File

@@ -238,12 +238,14 @@ deny = [
{ crate = "reqwest", wrappers = [
# Intended owner.
"codex-http-client",
# Intentional exception: this standalone, privileged Responses API proxy owns its blocking
# upstream HTTP transport independently of Codex.
"codex-responses-api-proxy",
# Temporary migration exceptions.
"codex-app-server",
"codex-core",
"codex-ollama",
"codex-otel",
"codex-responses-api-proxy",
# Third-party crates that own their reqwest integration. These are not part of the
# first-party migration count above.
"oauth2",