Ankush Gupta 75e0b4088e Add opt-in Guardian trust for orchestrator connector identities (#52250) ...

## What changed

Add the disabled-by-default `guardian_trust_orchestrator_connectors` feature flag. When enabled, Guardian V2 accepts connectors with nonblank IDs from the host-owned plugin service orchestrator as a trusted source without requiring a matching user configuration declaration.

Distinguish orchestrator provenance from user configuration in trusted-tool context. Trust remains scoped to the exact server or connector identity and source; descriptions, outputs, other tools, and other connectors remain untrusted.

## Testing

Add coverage for host-owned connector context, rejection of extension-owned Apps lookalikes and blank connector IDs, source-specific trust metadata, and context token limits. Snapshot the connector approval request history.

GitOrigin-RevId: fbd87dd71110ca7b2b92d50eef02e1e739a74a02

2026-10-08 20:04:38 +00:00

..

all__suite__additional_context__additional_context_simple_input.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__compaction_cold_resume_after_completion.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__compact__manual_compact_with_history_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__manual_compact_without_prev_user_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__mid_turn_compaction_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__pre_sampling_model_switch_compaction_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__pre_turn_compaction_context_window_exceeded_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__pre_turn_compaction_including_incoming_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__compact__pre_turn_compaction_strips_incoming_model_switch_shapes.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__mcp_tool_exposure__deferred_tools_initial_unchanged_and_removed.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__mcp_tool_exposure__deferred_tools_recover_during_sampling.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__mcp_tool_exposure__deferred_tools_resume_without_duplicate_update.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__model_provider_requirements__provider_selection_override_warning.snap

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

all__suite__model_visible_layout__model_visible_layout_cwd_change_refreshes_agents.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__model_visible_layout__model_visible_layout_environment_context_includes_one_subagent.snap

Make context snapshot text rendering consistent (#44976)

2026-09-12 05:04:11 +00:00

all__suite__model_visible_layout__model_visible_layout_environment_context_includes_two_subagents.snap

Make context snapshot text rendering consistent (#44976)

2026-09-12 05:04:11 +00:00

all__suite__model_visible_layout__model_visible_layout_resume_override_matches_rollout_model.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__model_visible_layout__model_visible_layout_resume_with_personality_change.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__model_visible_layout__model_visible_layout_turn_overrides.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__pending_input__pending_input_queued_mail_after_commentary.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__pending_input__pending_input_queued_mail_after_reasoning.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__pending_input__pending_input_user_input_no_preempt_after_reasoning.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__realtime_conversation__conversation_startup_context_current_thread_selects_many_turns_by_budget.snap

Budget realtime current thread context (#17519)

2026-04-12 11:59:09 -07:00

all__suite__request_plugin_install__startup_recommendations_developer_context.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__agent_eviction__idle_eviction_followup.snap

Add scenario coverage for worker context across idle eviction (#52062)

2026-10-08 10:53:45 +00:00

all__suite__scenarios__agent_message_board__agent_message_board_context.snap

Add optional descriptions to agent message board channels (#52183)

2026-10-08 17:25:39 +00:00

all__suite__scenarios__agent_message_board__remote__remote_board_notification.snap

Deliver remote message board notifications to active turns (#49686)

2026-09-30 17:33:59 +00:00

all__suite__scenarios__agent_message_board__remote__remote_board_tools.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__app_tool_exposure_CodeModeOnly.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__astra_active_environment_selection.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_async_question_and_answer.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_code_mode_call_timing.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_disabled_executor_skills.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_executor_plugin_policy_refresh.snap

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

all__suite__scenarios__astra_input_interrupts_response.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_input_yields_code_mode_cell.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_kickoff_remote_compaction_windows.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_plugin_policy_limits_visible_skills.snap

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

all__suite__scenarios__astra_plugin_refresh.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__astra_settings_release_check_tool_shapes.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__code_mode_catalog_messages_ranked_search.snap

Update collaboration snapshots for full-history fork instructions (#51335)

2026-10-06 10:56:45 +00:00

all__suite__scenarios__code_mode_catalog_messages.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__code_mode_mcp_schema_limits.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__code_mode_settled_helpers__code_mode_settled_helpers.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__compaction__remote_slash_compact.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__content_filter__content_filter_guidance.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__guardian_agent_messages__encrypted_parent_reply_survives_incremental_guardian_reviews.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__guardian_checkpoint_migration.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__guardian_code_mode_messaging.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__guardian_extra_policy__extra_policy_reaches_guardian_review.snap

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

all__suite__scenarios__guardian_handoff__guardian_handoff_delegation.snap

Keep Code Mode tool discovery guidance stable across catalog changes (#50562)

2026-10-03 07:37:00 +00:00

all__suite__scenarios__guardian_heartbeat__heartbeat_repetitions_keep_later_human_authorization.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__guardian_orchestrator_connector__host_owned_orchestrator_connector_request_history.snap

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

all__suite__scenarios__guardian_sender_context__cross_host_sender_context.snap

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

all__suite__scenarios__incremental_tools__incremental_tool_removals.snap

Distinguish namespace removals in incremental tool updates (#51202)

2026-10-05 23:49:21 +00:00

all__suite__scenarios__incremental_tools__incremental_tools.snap

Record base instructions in incremental tool history (#51188)

2026-10-05 22:20:38 +00:00

all__suite__scenarios__incremental_tools_resume__disable_incremental_tools.snap

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

all__suite__scenarios__incremental_tools_resume__legacy_resume_remote_compaction.snap

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

all__suite__scenarios__incremental_tools_resume__legacy_resume_window_reset.snap

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

all__suite__scenarios__indirect_namespace_prefixes__catalog_indirect_namespace_prefixes.snap

Support model-specific function description prefixes (#51930)

2026-10-08 03:20:54 +00:00

all__suite__scenarios__mailbox_preemption__mailbox_preemption_commentary_deferred_false.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__mailbox_preemption__mailbox_preemption_commentary_deferred_true.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__mailbox_preemption__mailbox_preemption_partial_answer_deferred_false.snap

Handle partial answers consistently across agent workflows (#51249)

2026-10-06 03:27:04 +00:00

all__suite__scenarios__mailbox_preemption__mailbox_preemption_partial_answer_deferred_true.snap

Handle partial answers consistently across agent workflows (#51249)

2026-10-06 03:27:04 +00:00

all__suite__scenarios__mailbox_preemption__mailbox_preemption_reasoning_deferred_false.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__mailbox_preemption__mailbox_preemption_reasoning_deferred_true.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__mcp_resource_messages__mcp_resource_messages.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__model_catalog_refresh_preserves_tools_and_history.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__multi_agent_catalog_parameters.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__mxc__preferred_mxc_permissions.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__partial_answers__partial_answer_continuation.snap

Handle partial answers consistently across agent workflows (#51249)

2026-10-06 03:27:04 +00:00

all__suite__scenarios__partial_answers__partial_answer_fork.snap

Update collaboration snapshots for full-history fork instructions (#51335)

2026-10-06 10:56:45 +00:00

all__suite__scenarios__prediction_fork_inherits_parent_context.snap

Add experimental prediction forks that inherit parent context (#51884)

2026-10-08 00:09:03 +00:00

all__suite__scenarios__provider_capabilities__custom_provider_capabilities.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__read_only_mcp__read_only_mcp_requests.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__realtime_attachment_replacement.snap

Add completion-aware realtime attachment and session-scoped detach (#51539)

2026-10-07 01:28:59 +00:00

all__suite__scenarios__shared_instructions__shared_instructions_update_running_descendants.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__skill_catalog_dedup__dedup_before_budgeting.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__strict_3p_cache__strict_3p_mcp_catalog_cache.snap

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

all__suite__scenarios__subagent_browser_auth.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__subagent_inherits_pending_environment_windows.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__subagent_inherits_pending_environment.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__scenarios__tools_namespace_budget__names_before_descriptions.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__skills_extension__cloud_skills_across_executor_readiness_windows.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__skills_extension__cloud_skills_across_executor_readiness.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__token_budget__token_budget_new_context_window_tool_full_context.snap

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

all__suite__unified_exec__exec_command_tty_disabled.snap

Gate unified exec TTY support behind a feature flag (#42718)

2026-09-04 10:22:43 +00:00