codex

mirror of https://github.com/openai/codex.git synced 2026-09-08 15:50:34 +00:00

Files

felixxia-oai 694edc23b2 Propagate trusted root skills to delegated workers (#41118 )

## Why

Guardian reviews for delegated workers need to recognize skills explicitly
invoked by the user on the root turn.

## What changed

- Record verified user-owned skill paths as bounded, turn-matched Guardian
  evidence.
- Include trusted paths from the current worker and its root snapshot when
  building review context.
- Exclude skill trust from later root turns so stale authorization is not
  inherited.

## Testing

- Add an app-server lifecycle test covering inheritance of a root-invoked
  skill by a delegated worker and its removal on the next root turn.

GitOrigin-RevId: aa28f485edb7a447e51d51de8dc89b959fd63d40

2026-08-27 11:31:40 +00:00

agent

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

connectors

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

extension-api

Freeze plugin roots in MCP tool attribution (#41117 )

2026-08-27 11:27:50 +00:00

git-attribution

Apply Codex attribution to app-created commits (#38419 )