jif 4b81410a80 Treat user input answers as Guardian authorization changes (#40623) ...

## Why

Answers collected by `request_user_input` can change what the user authorizes, but post-tool hooks may replace or reject the tool output that Guardian normally sees.

## What changed

- Record bounded, host-observed answers before post-tool hooks run and provide them as trusted evidence to synchronous and asynchronous Guardian reviews.
- Include root-thread answers in worker review context.
- Count successful answers as authorization changes so earlier review evidence becomes stale, while ignoring empty or unrelated answers.

## Testing

Add coverage for allowed and denied stale reviews, empty and oversized answers, hook-modified output, and root-to-worker propagation.

GitOrigin-RevId: 970c52e40338ecd057c7cd2a69d04b06e97cd068

2026-08-25 15:03:46 +00:00

..

code_mode

Add root turn IDs to turn and tool analytics (#40486)

2026-08-24 22:30:59 +00:00

handlers

Treat user input answers as Guardian authorization changes (#40623)

2026-08-25 15:03:46 +00:00

runtimes

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

approvals_tests.rs

Use model-specific auto-review outcome instructions (#39741)

2026-08-20 16:52:16 +00:00

approvals.rs

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

context_tests.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

context.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

control_tool_analytics.rs

Track history, notes, and async messages as control tools (#40496)

2026-08-24 23:19:03 +00:00

events.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

executed_tool_calls_tests.rs

Count serialized JSON bytes without allocating strings (#40604)

2026-08-25 13:10:24 +00:00

executed_tool_calls.rs

Count serialized JSON bytes without allocating strings (#40604)

2026-08-25 13:10:24 +00:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

hosted_spec.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

lifecycle.rs

Expose invocation sources to extension tools (#40382)

2026-08-24 11:02:14 +00:00

mod.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

network_approval_tests.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

network_approval.rs

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

orchestrator.rs

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

parallel.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

registry_tests.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

registry.rs

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

router_tests.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

router.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

sandboxing_tests.rs

Preserve filesystem permission path conventions (#39084)

2026-08-17 21:49:30 +00:00

sandboxing.rs

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

spec_plan_tests.rs

Derive sandbox contexts from turn environments (#40551)

2026-08-25 05:16:45 +00:00

spec_plan.rs

Harden internal Guardian session isolation (#40497)

2026-08-24 23:23:18 +00:00

tool_dispatch_trace_tests.rs

Configure the default code-mode exec yield timeout (#37352)

2026-08-07 01:41:54 +00:00

tool_dispatch_trace.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

tool_namespaces_info.rs

Include tool namespace inventory in turn metadata (#37492)

2026-08-07 19:32:15 +00:00