From fe614a6304ef804be74a622e482fdd75977abcba Mon Sep 17 00:00:00 2001
From: jif <jif@openai.com>
Date: Thu, 13 Aug 2026 08:54:37 +0000
Subject: [PATCH] Add Guardian V2 extension scaffold (#38336)

## What changed

- Add the `codex-guardian-v2` crate with an extension install entry point that does not register contributors yet.
- Register the crate in the Cargo workspace and add its Bazel target.

GitOrigin-RevId: 7c0c9479c6722d65f0f0dad9b0fd4a756e4649b3
---
 codex-rs/Cargo.lock                  |  7 +++++++
 codex-rs/Cargo.toml                  |  1 +
 codex-rs/ext/guardian-v2/BUILD.bazel |  6 ++++++
 codex-rs/ext/guardian-v2/Cargo.toml  | 17 +++++++++++++++++
 codex-rs/ext/guardian-v2/src/lib.rs  |  4 ++++
 5 files changed, 35 insertions(+)
 create mode 100644 codex-rs/ext/guardian-v2/BUILD.bazel
 create mode 100644 codex-rs/ext/guardian-v2/Cargo.toml
 create mode 100644 codex-rs/ext/guardian-v2/src/lib.rs

diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index da4e57e05e..a484caf3e4 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -3295,6 +3295,13 @@ dependencies = [
  "codex-protocol",
 ]
 
+[[package]]
+name = "codex-guardian-v2"
+version = "0.0.0"
+dependencies = [
+ "codex-extension-api",
+]
+
 [[package]]
 name = "codex-history"
 version = "0.0.0"
diff --git a/codex-rs/Cargo.toml b/codex-rs/Cargo.toml
index c5bbcb5920..88649de734 100644
--- a/codex-rs/Cargo.toml
+++ b/codex-rs/Cargo.toml
@@ -59,6 +59,7 @@ members = [
     "ext/goal",
     "ext/git-attribution",
     "ext/guardian",
+    "ext/guardian-v2",
     "ext/image-generation",
     "ext/items",
     "ext/memories",
diff --git a/codex-rs/ext/guardian-v2/BUILD.bazel b/codex-rs/ext/guardian-v2/BUILD.bazel
new file mode 100644
index 0000000000..46d2151a84
--- /dev/null
+++ b/codex-rs/ext/guardian-v2/BUILD.bazel
@@ -0,0 +1,6 @@
+load("//:defs.bzl", "codex_rust_crate")
+
+codex_rust_crate(
+    name = "guardian-v2",
+    crate_name = "codex_guardian_v2",
+)
diff --git a/codex-rs/ext/guardian-v2/Cargo.toml b/codex-rs/ext/guardian-v2/Cargo.toml
new file mode 100644
index 0000000000..3ebdc530b4
--- /dev/null
+++ b/codex-rs/ext/guardian-v2/Cargo.toml
@@ -0,0 +1,17 @@
+[package]
+edition.workspace = true
+license.workspace = true
+name = "codex-guardian-v2"
+version.workspace = true
+
+[lib]
+name = "codex_guardian_v2"
+path = "src/lib.rs"
+test = false
+doctest = false
+
+[lints]
+workspace = true
+
+[dependencies]
+codex-extension-api = { workspace = true }
diff --git a/codex-rs/ext/guardian-v2/src/lib.rs b/codex-rs/ext/guardian-v2/src/lib.rs
new file mode 100644
index 0000000000..4752641123
--- /dev/null
+++ b/codex-rs/ext/guardian-v2/src/lib.rs
@@ -0,0 +1,4 @@
+use codex_extension_api::ExtensionRegistryBuilder;
+
+/// Installs the Guardian V2 extension without registering contributors yet.
+pub fn install<C: Sync>(_registry: &mut ExtensionRegistryBuilder<C>) {}