jif 942af8447b Retire the untrusted approval policy (#39630) ...

## What changed

- Remove `untrusted` from the CLI, configuration schema, and MCP tool interface. Explicit `approval_policy = "untrusted"` settings now fail with an actionable error.
- Remove the known-safe command allowlist. Projects marked untrusted now request approval for every command unless an explicit exec policy rule allows it.
- Keep command parsing conservative by treating in-place `sed` forms as mutating and ignoring unrecognized commands when recording memory usage.

## Testing

- Cover rejection of the retired configuration value and approval requests for commands in untrusted projects.

GitOrigin-RevId: d6bf425edddfffbb325eee6acf383434af5fd33b

2026-08-20 07:03:02 +00:00

..

src

Retire the untrusted approval policy (#39630)

2026-08-20 07:03:02 +00:00

BUILD.bazel

feat: split codex-common into smaller utils crates (#11422)

2026-02-11 12:59:24 +00:00

Cargo.toml

Trim TUI legacy core helper usage (#22695)

2026-05-14 16:54:59 -07:00