ioanbudea-OAI 0e6f153732 Derive sandbox telemetry labels directly from permission profiles (#60500) ...

## What changed

Compute the `sandbox_policy` label for `codex.conversation_starts` from the effective `PermissionProfile` without constructing a legacy `SandboxPolicy`. Preserve the historical labels and native-path compatibility fallbacks, including `workspace-write` for writable profiles that cannot be represented by a legacy policy.

Share the full-disk write compatibility check with session startup and the write-intent check with legacy policy conversion.

## Testing

Extend telemetry tests to assert sandbox labels in both logs and traces across disabled, external, read-only, workspace-write, and full-disk profiles, including unrenderable writable URIs and read restrictions. Add protocol assertions for legacy write-intent detection.

GitOrigin-RevId: 00f11d763c366453e7bb0899546a4ebbdb93c4d5

2026-11-10 02:31:50 +00:00

..

models

Route response item IDs through a shared generator (#59312)

2026-11-04 04:02:00 +00:00

openai_models

Allow model overrides for incremental Code Mode tool messages (#60188)

2026-11-08 01:13:32 +00:00

permissions

Centralize filesystem permission resolution for sandbox enforcement (#59009)

2026-11-02 23:19:47 +00:00

prompts/base_instructions

…

account.rs

Add a built-in Google Cloud Vertex AI provider (#56265)

2026-10-22 21:01:14 +00:00

agent_error.rs

Add bounded diagnostics for agent spawn failures (#51355)

2026-10-06 12:32:27 +00:00

agent_path.rs

…

approvals.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

auth.rs

Add support for Academic Researchers plans (#55387)

2026-10-19 21:43:19 +00:00

capabilities_tests.rs

…

capabilities.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

codex_error_info.rs

Distinguish policy-restricted capacity failures from server overloads (#57452)

2026-10-27 13:31:38 +00:00

config_types.rs

Retire the personality feature flag and document deprecated settings (#45809)

2026-09-15 23:39:40 +00:00

context_window_id.rs

Introduce a dedicated context window ID type (#59328)

2026-11-04 06:05:16 +00:00

conversation_start_params_tests.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

dynamic_tools.rs

…

environment.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

error_tests.rs

Point usage and credit links to ChatGPT settings (#49874)

2026-10-01 05:16:40 +00:00

error.rs

Treat workspace access denials as terminal errors (#60480)

2026-11-10 00:54:30 +00:00

exec_output_tests.rs

…

exec_output.rs

…

guardian_transcript.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

hooks.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

item_id_generator.rs

Route response item IDs through a shared generator (#59312)

2026-11-04 04:02:00 +00:00

items.rs

Preserve display instructions in answer moderation (#60172)

2026-11-07 21:31:08 +00:00

legacy_events.rs

Preserve display instructions in answer moderation (#60172)

2026-11-07 21:31:08 +00:00

lib.rs

Introduce a dedicated context window ID type (#59328)

2026-11-04 06:05:16 +00:00

local_media_tests.rs

Add audio file references with explicit runtime rejection (#58430)

2026-10-30 20:53:25 +00:00

local_media.rs

Add audio file references with explicit runtime rejection (#58430)

2026-10-30 20:53:25 +00:00

mcp_approval_meta.rs

Include tool names and annotation hints in MCP approval metadata (#58161)

2026-10-29 19:34:46 +00:00

mcp_policy.rs

…

mcp.rs

Allow deferring plain-text MCP output in thread item listings (#60390)

2026-11-09 12:54:12 +00:00

memory_citation.rs

…

memory_version.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

models.rs

Derive sandbox telemetry labels directly from permission profiles (#60500)

2026-11-10 02:31:50 +00:00

network_policy.rs

…

num_format.rs

…

openai_models.rs

Resolve saved Daybreak preferences against advertised model programs (#59192)

2026-11-03 16:33:17 +00:00

parse_command.rs

…

permission_profile_intersection_tests.rs

Protect .aws directories under sandbox writable roots (#48176)

2026-09-25 19:14:31 +00:00

permission_profile_intersection.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_snapshot_tests.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

permission_profile_snapshot.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

permissions_tests.rs

Derive sandbox telemetry labels directly from permission profiles (#60500)

2026-11-10 02:31:50 +00:00

permissions.rs

Derive sandbox telemetry labels directly from permission profiles (#60500)

2026-11-10 02:31:50 +00:00

plan_tool.rs

…

protocol.rs

Support cancellation and deadlines for realtime attachments (#60443)

2026-11-09 20:24:40 +00:00

realtime.rs

Persist realtime events in the thread timeline (#40508)

2026-08-25 01:03:20 +00:00

request_permissions.rs

Preserve target-native cwd in permission approval requests (#42314)

2026-09-02 17:27:50 +00:00

request_user_input_tests.rs

…

request_user_input.rs

…

response_item_id_tests.rs

Route response item IDs through a shared generator (#59312)

2026-11-04 04:02:00 +00:00

response_item_id.rs

Route response item IDs through a shared generator (#59312)

2026-11-04 04:02:00 +00:00

response_usage.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00

review_format.rs

…

sandbox.rs

Preserve sandbox overrides across execution requests (#51786)

2026-10-07 17:59:22 +00:00

sanitized_git_url_tests.rs

Start cloud threads with the local GitHub project (#60007)

2026-11-06 23:00:38 +00:00

sanitized_git_url.rs

Start cloud threads with the local GitHub project (#60007)

2026-11-06 23:00:38 +00:00

security_risk.rs

Record reviewed actions with security risk scores (#40901)

2026-08-26 15:02:21 +00:00

session_id.rs

…

shell_environment_tests.rs

Expose originating tool call metadata in command environments (#52119)

2026-10-08 13:45:19 +00:00

shell_environment.rs

Expose originating tool call metadata in command environments (#52119)

2026-10-08 13:45:19 +00:00

thread_id.rs

…

tool_name.rs

…

turn_input.rs

Allow per-turn overrides for direct-only tool namespaces (#59481)

2026-11-04 19:58:49 +00:00

user_input.rs

Add audio file references with explicit runtime rejection (#58430)

2026-10-30 20:53:25 +00:00