From 85f29b453a0ca77f718f09428e5f79e33d498836 Mon Sep 17 00:00:00 2001
From: Alex Kira <akira@openai.com>
Date: Sat, 24 Oct 2026 01:43:04 +0000
Subject: [PATCH] Register the `untrusted_as_tool_output` feature flag (#57204)

## What changed

Add `untrusted_as_tool_output` as an under-development feature, disabled by default, and expose it in the configuration schema. The flag is intended for rendering client-supplied untrusted context as standalone named tool outputs.

GitOrigin-RevId: 6fe630c8d380a87edb48e08887215c1ec17447ed
---
 codex-rs/core/config.schema.json | 6 ++++++
 codex-rs/features/src/lib.rs     | 8 ++++++++
 2 files changed, 14 insertions(+)

diff --git a/codex-rs/core/config.schema.json b/codex-rs/core/config.schema.json
index 0f83fd98aa..a61f58b8ea 100644
--- a/codex-rs/core/config.schema.json
+++ b/codex-rs/core/config.schema.json
@@ -1395,6 +1395,9 @@
             "unified_image_budget": {
               "type": "boolean"
             },
+            "untrusted_as_tool_output": {
+              "type": "boolean"
+            },
             "use_agent_identity": {
               "type": "boolean"
             },
@@ -8000,6 +8003,9 @@
         "unified_image_budget": {
           "type": "boolean"
         },
+        "untrusted_as_tool_output": {
+          "type": "boolean"
+        },
         "use_agent_identity": {
           "type": "boolean"
         },
diff --git a/codex-rs/features/src/lib.rs b/codex-rs/features/src/lib.rs
index 19cc2c1c7d..4a6595122d 100644
--- a/codex-rs/features/src/lib.rs
+++ b/codex-rs/features/src/lib.rs
@@ -134,6 +134,8 @@ pub enum Feature {
     MultiEnvCopyFile,
     /// Send per-content-entry classifications in internal Responses metadata.
     ContentItemKinds,
+    /// Render client-supplied untrusted context as standalone named tool outputs.
+    UntrustedAsToolOutput,
     /// Record model-attempted tool calls in internal Responses metadata.
     ExecutedToolCallMetadata,
     /// Enable JavaScript code mode backed by the standalone host process.
@@ -1202,6 +1204,12 @@ pub const FEATURES: &[FeatureSpec] = &[
         stage: Stage::Stable,
         default_enabled: true,
     },
+    FeatureSpec {
+        id: Feature::UntrustedAsToolOutput,
+        key: "untrusted_as_tool_output",
+        stage: Stage::UnderDevelopment,
+        default_enabled: false,
+    },
     FeatureSpec {
         id: Feature::ExecutedToolCallMetadata,
         key: "executed_tool_call_metadata",