Dylan Hurd c9b19deb09 Distinguish Guardian review threads from subagents (#40221) ...

## Why

Guardian reviews were reported with the generic `subagent` thread source, making them indistinguishable from other delegated threads in persisted metadata and analytics.

## What changed

- Add the `guardian_review` thread source to the core protocol and app-server schema.
- Assign it to Guardian reviewer sessions and propagate the configured source through turn metadata, rollouts, and analytics.
- Continue treating Guardian reviews like subagents for paginated history and trusted-provenance checks.

## Testing

- Cover protocol round trips, delegate source selection, emitted analytics, request metadata, and persisted rollout metadata.

GitOrigin-RevId: 07480c122715812874c9d3b48bb39fc5c86b2367

2026-08-23 10:06:57 +00:00

..

schema

Distinguish Guardian review threads from subagents (#40221)

2026-08-23 10:06:57 +00:00

scripts

Precompute app-server protocol exports (#36212)

2026-07-30 19:47:30 +00:00

src

Distinguish Guardian review threads from subagents (#40221)

2026-08-23 10:06:57 +00:00

BUILD.bazel

Precompute app-server protocol exports (#36212)

2026-07-30 19:47:30 +00:00

Cargo.toml

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00