jif e269f2164c Include sender user messages in Guardian delegation reviews (#46179) ...

## Why

A delegated task can omit restrictions from the sender's user messages. Guardian needs that context when reviewing actions in the receiving thread.

## What changed

- When thread-owned Guardian context is enabled, capture up to three recent local user messages when a `send_message_to_thread` delivery from `codex_app` or `codex_tui` is accepted.
- Provide a bounded snapshot to synchronous and asynchronous reviewers, with explicit notices for unavailable evidence and a reminder that historical context does not transfer permission. Keep the snapshot out of the worker prompt.
- Retain snapshots with their deliveries across replay, compaction, and rollback, and strip them from forked agent history.

## Testing

Add coverage for reviewer-only visibility, missing sender provenance, context-budget preservation, checkpoint replay and rollback, fork isolation, and input serialization that rejects harness metadata.

GitOrigin-RevId: 3870ba762aa81689713b56d4cb3b98566bffed88

2026-09-17 10:02:38 +00:00

..

src

Include sender user messages in Guardian delegation reviews (#46179)

2026-09-17 10:02:38 +00:00

BUILD.bazel

Extract persisted history types into a dedicated crate (#37871)

2026-08-10 19:26:52 +00:00

Cargo.toml

Preserve verified answers across history compaction (#42293)

2026-09-02 15:07:11 +00:00