jif ed12cc75d3 Keep Guardian reviews on the applied instruction snapshot (#46580) ...

## Why

Shared thread instructions can change after an action is generated but before Guardian reviews it. Polling the live provider during review can give the reviewer different instructions from those applied to the action.

## What changed

Initialize Guardian reviewers with the user and thread instructions captured in the review session reuse key, keeping the review tied to the applied snapshot.

## Testing

Add a regression test that updates and removes shared instructions between action generation and review in a running descendant thread. Verify that the worker picks up each change, Guardian uses the applied instructions, and instruction changes create new reviewer sessions even while ancestor threads remain idle.

GitOrigin-RevId: 4980762bc7b6646a1691a43be93c71a7dc611ec6

2026-09-19 02:31:40 +00:00

..

agent

Allow thread instruction providers to share updates with subagents (#46577)

2026-09-19 02:15:20 +00:00

apps

…

config

Add system proxy fallback for login and startup requests (#46562)

2026-09-19 01:37:14 +00:00

context

Include sender user messages in Guardian delegation reviews (#46179)

2026-09-17 10:02:38 +00:00

context_manager

Capture Guardian review checkpoints from live context (#46512)

2026-09-18 23:37:35 +00:00

exec_policy

Apply remote platform semantics to exec safety checks (#42113)

2026-09-01 18:24:56 +00:00

guardian

Keep Guardian reviews on the applied instruction snapshot (#46580)

2026-09-19 02:31:40 +00:00

mcp_tool_call

Use captured step settings for tool planning and execution (#44242)

2026-09-09 17:45:37 +00:00

plugins

Attribute command and plugin analytics to the invoking model (#45445)

2026-09-14 15:30:22 +00:00

realtime_conversation

Support attaching to existing realtime calls (#39876)

2026-08-21 06:41:28 +00:00

realtime_history

Record realtime conversation history in Core (#41924)

2026-08-31 22:38:23 +00:00

sandboxing

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

session

Allow thread instruction providers to share updates with subagents (#46577)

2026-09-19 02:15:20 +00:00

state

Expose a backend-independent agent control contract (#46547)

2026-09-19 01:03:55 +00:00

tasks

Add turn-start cloud plugin discovery to the MCP extension (#46572)

2026-09-19 02:07:58 +00:00

thread_manager

Allow thread instruction providers to share updates with subagents (#46577)

2026-09-19 02:15:20 +00:00

tools

Keep step settings and approval environments consistent (#46556)

2026-09-19 01:27:26 +00:00

unified_exec

Keep step settings and approval environments consistent (#46556)

2026-09-19 01:27:26 +00:00

utils

Count serialized JSON bytes without allocating strings (#40604)

2026-08-25 13:10:24 +00:00

agent_communication.rs

…

agents_md_manager.rs

Allow thread instruction providers to share updates with subagents (#46577)

2026-09-19 02:15:20 +00:00

agents_md_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

agents_md.rs

Reject paths in project documentation fallback filenames (#45865)

2026-09-16 04:59:23 +00:00

apply_patch_tests.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00

apply_patch.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

attestation.rs

…

client_common_tests.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

client_common.rs

Normalize image detail for the receiving model (#44249)

2026-09-09 17:56:06 +00:00

client_tests.rs

Filter saved reasoning overrides from requests when disabled (#46291)

2026-09-17 19:42:56 +00:00

client.rs

Centralize retry decisions and delays in CodexErr (#46540)

2026-09-19 00:46:30 +00:00

codex_delegate_tests.rs

Keep step settings and approval environments consistent (#46556)

2026-09-19 01:27:26 +00:00

codex_delegate.rs

Keep step settings and approval environments consistent (#46556)

2026-09-19 01:27:26 +00:00

codex_thread.rs

Fix active-turn environment selection lookup (#46557)

2026-09-19 01:27:48 +00:00

command_canonicalization_tests.rs

…

command_canonicalization.rs

…

compact_model_fallback.rs

Broaden compaction fallback to the current model (#46324)

2026-09-17 23:54:31 +00:00

compact_remote_history_tests.rs

Remove the unused legacy remote compaction implementation (#44273)

2026-09-09 18:40:53 +00:00

compact_remote_history.rs

Remove the unused legacy remote compaction implementation (#44273)

2026-09-09 18:40:53 +00:00

compact_remote_v2_attempt.rs

Include Code Mode tool metadata in compaction prompts (#46044)

2026-09-16 22:26:40 +00:00

compact_remote_v2_image_budget_tests.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

compact_remote_v2_images.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

compact_remote_v2.rs

Add opt-in compaction after final responses (#46541)

2026-09-19 00:52:56 +00:00

compact_tests.rs

Include Code Mode tool metadata in compaction prompts (#46044)

2026-09-16 22:26:40 +00:00

compact_token_budget.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

compact.rs

Add opt-in compaction after final responses (#46541)

2026-09-19 00:52:56 +00:00

connectors_tests.rs

Honor app link settings for MCP tool approvals (#42056)

2026-09-01 13:43:27 +00:00

connectors.rs

Keep MCP user interaction on the root thread (#46066)

2026-09-17 01:18:37 +00:00

current_time.rs

…

cyber_access_program.rs

Add per-turn cyber access program selection (#40687)

2026-08-25 19:54:52 +00:00

elicitation_tests.rs

…

elicitation.rs

…

environment_selection.rs

Use captured environment state for permissions and daemon recovery (#46568)

2026-09-19 01:56:57 +00:00

event_mapping_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

event_mapping.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

exec_env_tests.rs

…

exec_env.rs

Expose the Codex version to commands and turn metadata (#42395)

2026-09-03 00:17:19 +00:00

exec_policy_tests.rs

Remove selected core test cases (#42066)

2026-09-01 14:43:27 +00:00

exec_policy_windows_tests.rs

…

exec_policy.rs

Apply remote platform semantics to exec safety checks (#42113)

2026-09-01 18:24:56 +00:00

exec_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

exec.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

feedback_config_tests.rs

Add configuration and feature diagnostics to report metadata (#46501)

2026-09-18 23:07:36 +00:00

feedback_config.rs

Add configuration and feature diagnostics to report metadata (#46501)

2026-09-18 23:07:36 +00:00

function_tool.rs

…

git_info_tests.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

guardian_review.rs

Move Guardian reviewer lifecycle into the extension (#45537)

2026-09-14 22:58:51 +00:00

hook_mcp_executor.rs

Preserve executor context for MCP stop hooks (#40012)

2026-08-21 21:17:42 +00:00

hook_runtime.rs

Include sender user messages in Guardian delegation reviews (#46179)

2026-09-17 10:02:38 +00:00

image_preparation_tests.rs

Route prepared images through the attachment store (#46065)

2026-09-17 00:49:12 +00:00

image_preparation.rs

Route prepared images through the attachment store (#46065)

2026-09-17 00:49:12 +00:00

installation_id.rs

…

lib.rs

Expose a backend-independent agent control contract (#46547)

2026-09-19 01:03:55 +00:00

mcp_openai_file.rs

Keep step settings and approval environments consistent (#46556)

2026-09-19 01:27:26 +00:00

mcp_skill_dependencies.rs

Add trusted enterprise MCP auth configuration (#44832)

2026-09-11 14:25:56 +00:00

mcp_tool_approval_templates.rs

Organize bundled Rust resources under asset directories (#41477)

2026-08-29 06:05:28 +00:00

mcp_tool_call_tests.rs

Keep step settings and approval environments consistent (#46556)

2026-09-19 01:27:26 +00:00

mcp_tool_call.rs

Keep MCP user interaction on the root thread (#46066)

2026-09-17 01:18:37 +00:00

mcp_tool_exposure_test.rs

…

mcp_tool_exposure.rs

Honor app link settings for MCP tool approvals (#42056)

2026-09-01 13:43:27 +00:00

mcp.rs

Add turn-start cloud plugin discovery to the MCP extension (#46572)

2026-09-19 02:07:58 +00:00

memory_usage.rs

Tag memory usage telemetry with the memory version (#45960)

2026-09-16 15:17:41 +00:00

mention_syntax.rs

…

network_policy_decision_tests.rs

…

network_policy_decision.rs

…

original_image_detail.rs

…

otel_init.rs

…

prompt_debug.rs

Use the originating model when recording conversation history (#44243)

2026-09-09 17:46:00 +00:00

realtime_context_tests.rs

Persist Daybreak preferences in thread metadata (#42854)

2026-09-04 21:17:25 +00:00

realtime_context.rs

…

realtime_conversation_tests.rs

…

realtime_conversation.rs

Gate new turn submissions on host shutdown admission (#43943)

2026-09-08 23:45:10 +00:00

realtime_history_tests.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

realtime_history.rs

Record realtime conversation history in Core (#41924)

2026-08-31 22:38:23 +00:00

realtime_prompt.rs

…

responses_headers.rs

Route Guardian requests through /responses with identifying headers (#45736)

2026-09-15 17:09:11 +00:00

responses_metadata.rs

Expose session analytics state in Responses turn metadata (#44628)

2026-09-10 19:41:14 +00:00

responses_retry_tests.rs

…

responses_retry.rs

Centralize retry decisions and delays in CodexErr (#46540)

2026-09-19 00:46:30 +00:00

rollout_budget.rs

Expose a backend-independent agent control contract (#46547)

2026-09-19 01:03:55 +00:00

rollout.rs

…

safety_tests.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

safety.rs

Authorize apply_patch in the executor path context (#42391)

2026-09-02 23:58:24 +00:00

sandbox_tags_tests.rs

Report configured sandbox policy consistently (#41933)

2026-08-31 23:29:20 +00:00

sandbox_tags.rs

Enable MXC selection through Windows sandbox configuration (#46271)

2026-09-17 18:20:28 +00:00

session_prefix_tests.rs

…

session_prefix.rs

Classify additional generated context fragments (#40275)

2026-08-23 20:08:40 +00:00

session_rollout_init_error.rs

Preserve sandbox errors during session initialization (#40381)

2026-08-24 10:56:54 +00:00

session_startup_prewarm.rs

Move Guardian reviewer lifecycle into the extension (#45537)

2026-09-14 22:58:51 +00:00

shell_snapshot_sandbox_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

shell_snapshot_sandbox.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

shell_snapshot_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

shell_snapshot.rs

Support configured credential providers across shell snapshots (#44072)

2026-09-09 06:04:59 +00:00

shell_tests.rs

…

shell.rs

…

skills.rs

Trust invoked user skills in Guardian reviews (#41006)

2026-08-27 00:07:26 +00:00

spawn.rs

…

state_db_bridge.rs

…

stream_events_utils_tests.rs

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

stream_events_utils.rs

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

test_support.rs

Add a provider for thread-scoped instructions (#44701)

2026-09-11 01:57:54 +00:00

thread_manager_tests.rs

Add turn-start cloud plugin discovery to the MCP extension (#46572)

2026-09-19 02:07:58 +00:00

thread_manager.rs

Allow thread instruction providers to share updates with subagents (#46577)

2026-09-19 02:15:20 +00:00

thread_rollout_truncation_tests.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

thread_rollout_truncation.rs

Capture Guardian review checkpoints from live context (#46512)

2026-09-18 23:37:35 +00:00

thread_startup_metadata.rs

Separate thread startup metadata from replay history (#46294)

2026-09-17 19:55:20 +00:00

turn_diff_tracker_tests.rs

…

turn_diff_tracker.rs

…

turn_metadata_tests.rs

Enable MXC selection through Windows sandbox configuration (#46271)

2026-09-17 18:20:28 +00:00

turn_metadata.rs

Enable MXC selection through Windows sandbox configuration (#46271)

2026-09-17 18:20:28 +00:00

turn_timing_tests.rs

Replace Guardian tickets with parent response IDs (#43002)

2026-09-05 13:02:49 +00:00

turn_timing.rs

Propagate response tickets to Guardian reviews (#42758)

2026-09-04 12:56:26 +00:00

user_shell_command_tests.rs

…

user_shell_command.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

util_tests.rs

…

util.rs

Move retry backoff into codex-async-utils (#46330)

2026-09-18 00:25:37 +00:00

web_search.rs

…

windows_sandbox_read_grants_tests.rs

…

windows_sandbox_read_grants.rs

…

windows_sandbox_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

windows_sandbox.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

windows_system_config.rs

Add telemetry for the Windows system config namespace (#44284)

2026-09-09 19:31:12 +00:00

worktree_trust_tests.rs

…