ioanbudea-OAI
400a1e1e82
Use native permission profiles for diagnostics and sandbox checks ( #61369 )
...
## What changed
- Derive sampling diagnostic and rollout trace labels directly from permission profiles instead of constructing legacy sandbox policies. Rename the trace metadata field from `sandbox_policy` to `permissions_profile`.
- Extract `with_workspace_write_cwd` to share default workspace metadata protections between legacy policy conversion and the TUI's sandbox-mode compatibility check. Build the check's workspace-write profile from filesystem and network permissions directly.
## Testing
Add a regression test confirming that the sandbox-mode compatibility check accepts standard workspace metadata protections and rejects a profile with an additional writable `.git` root.
GitOrigin-RevId: f20d23afd80dff6347865df3d6a94d6f5e90e1e0
2026-11-13 20:22:45 +00:00
..
2026-11-13 18:46:13 +00:00
2026-10-29 17:25:51 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 22:41:50 +00:00
2026-11-05 16:08:23 +00:00
2026-11-13 04:51:06 +00:00
2026-11-13 19:50:06 +00:00
2026-11-13 18:45:02 +00:00
2026-11-10 01:31:19 +00:00
2026-11-13 18:46:13 +00:00
2026-11-10 11:17:06 +00:00
2026-11-07 10:41:36 +00:00
2026-11-02 17:05:56 +00:00
2026-11-04 00:19:12 +00:00
2026-11-07 10:41:36 +00:00
2026-11-13 04:48:28 +00:00
2026-11-05 22:03:29 +00:00
2026-11-13 18:52:41 +00:00
2026-11-12 21:03:47 +00:00
2026-11-05 04:25:19 +00:00
2026-11-05 05:09:32 +00:00
2026-11-05 05:09:32 +00:00
2026-11-12 16:38:13 +00:00
2026-11-12 16:38:13 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-13 05:04:45 +00:00
2026-11-13 19:50:06 +00:00
2026-11-13 08:25:41 +00:00
2026-11-10 03:02:25 +00:00
2026-11-13 01:08:55 +00:00
2026-11-07 05:59:44 +00:00
2026-11-13 20:22:45 +00:00
2026-11-12 22:43:14 +00:00
2026-11-13 08:25:41 +00:00
2026-11-12 23:51:52 +00:00
2026-11-03 23:49:01 +00:00
2026-11-03 04:08:59 +00:00
2026-11-13 04:51:06 +00:00
2026-11-13 18:53:14 +00:00
2026-11-05 04:25:19 +00:00
2026-11-13 18:53:14 +00:00
2026-11-05 00:55:46 +00:00
2026-11-13 18:51:00 +00:00
2026-11-12 23:51:52 +00:00
2026-11-13 18:49:57 +00:00
2026-11-11 19:16:19 +00:00
2026-11-06 00:37:27 +00:00
2026-11-10 08:52:35 +00:00
2026-11-10 21:58:49 +00:00
2026-11-13 18:47:46 +00:00
2026-11-13 18:46:13 +00:00
2026-11-10 03:02:25 +00:00
2026-11-13 05:16:33 +00:00
2026-11-12 04:32:34 +00:00
2026-11-13 04:50:31 +00:00
2026-11-12 23:53:50 +00:00
2026-11-13 04:36:03 +00:00
2026-11-12 22:41:50 +00:00
2026-11-02 20:34:35 +00:00
2026-11-12 19:43:12 +00:00
2026-11-06 04:24:04 +00:00
2026-11-09 16:37:22 +00:00
2026-11-13 01:43:44 +00:00
2026-11-13 18:49:23 +00:00
2026-11-12 23:08:59 +00:00
2026-10-27 16:36:32 +00:00
2026-11-13 00:29:24 +00:00
2026-11-13 20:22:45 +00:00
2026-11-11 18:58:21 +00:00
2026-11-12 04:32:34 +00:00
2026-11-12 21:03:15 +00:00
2026-11-13 20:22:45 +00:00
2026-11-07 10:41:36 +00:00
2026-11-13 06:39:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-04 23:46:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-06 17:47:31 +00:00
2026-11-13 18:43:58 +00:00
2026-11-13 05:06:18 +00:00
2026-10-30 07:11:56 +00:00
2026-11-13 18:46:45 +00:00
2026-11-13 18:43:58 +00:00
2026-11-11 06:41:15 +00:00
2026-11-13 20:22:45 +00:00
2026-11-12 00:44:27 +00:00
2026-11-13 18:44:31 +00:00
2026-11-13 18:51:30 +00:00
2026-11-12 23:51:52 +00:00
2026-11-12 23:51:52 +00:00
2026-11-03 15:02:57 +00:00
2026-11-12 05:21:30 +00:00
2026-11-13 01:31:24 +00:00
2026-11-12 23:53:50 +00:00
2026-10-28 21:09:05 +00:00
2026-11-13 18:46:45 +00:00
2026-11-12 23:53:50 +00:00
2026-11-13 18:46:13 +00:00
2026-11-12 23:51:52 +00:00