jif 0a12b855a0 Preserve Guardian authorization across history compaction (#41660) ...

## Why

Compaction and host-injected context can rewrite the model-visible conversation
without changing what the user authorized. Treating those updates as authorization
changes prevents Guardian from reusing an otherwise valid review.

## What changed

- Track a host-owned user-message revision separately from the conversation history
  generation.
- Advance the revision for genuine user messages and history resets, while preserving
  it across compaction and internal context injection.
- Use message content-kind metadata to distinguish host context from user input,
  conservatively treating unknown or incomplete metadata as user authorization.

## Testing

Added coverage that cached Guardian authorization survives compaction and internal
context, but is invalidated by user input and rollback.

GitOrigin-RevId: c7960fa182d1686042c23764d2abc58acbc4b882

2026-08-30 11:56:24 +00:00

..

capabilities.rs

Add Guardian internal session support (#39994)

2026-08-21 19:11:05 +00:00

registry.rs

Preserve Guardian authorization across history compaction (#41660)

2026-08-30 11:56:24 +00:00

state.rs

Keep the latest Guardian risk score during concurrent sampling (#38580)

2026-08-14 13:44:51 +00:00