Dylan Hurd 357696c5e7 Route network access through the shared approval pipeline (#38299) ...

## What changed

- Represent blocked network requests as approval actions so permission hooks,
  automatic review, and user review use the common approval flow.
- Route network requests using the active turn's review settings, including for
  background terminals started by an earlier turn.
- Record the final applied network decision in tool telemetry without exposing
  the destination or assigning an approval source.
- Persist deny amendments and keep the blocked request denied.

## Testing

Added coverage for strict automatic review, cross-turn background network
requests, deny amendment persistence, and destination-safe telemetry.

GitOrigin-RevId: a2a9d106962f407ed93f4d198f40ced15f090b8e

2026-08-13 02:40:49 +00:00

..

events

Route network access through the shared approval pipeline (#38299)

2026-08-13 02:40:49 +00:00

metrics

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

config.rs

codex-otel: add configurable trace metadata (#21556)

2026-05-07 16:06:57 -07:00

lib.rs

[codex] Add externally provided Codex auth (#31274)

2026-07-07 17:43:19 -07:00

otlp.rs

fix(otel): make HTTP trace export survive app-server runtimes (#14300)

2026-03-11 12:33:10 -07:00

provider_shutdown_tests.rs

Bound interactive telemetry shutdown (#37109)

2026-08-05 15:20:21 +00:00

provider.rs

Keep runtime summary metrics out of Statsig exports (#37874)

2026-08-10 19:53:01 +00:00

targets.rs

chore(otel): reorganize codex-otel crate (#13800)

2026-03-06 14:58:18 -08:00

trace_context.rs

[codex] Propagate traces through exec-server HTTP (#30117)

2026-06-25 23:22:22 +00:00