felixxia-oai baab1705c6 Make Guardian v2 risk classification configurable (#38628) ...

## What changed

- Allow `features.guardianv2` to remain a boolean toggle or specify classifier instructions, the review threshold, reasoning effort, and action and instruction token limits.
- Add transcript controls for included sources, per-entry and total token budgets, and the number of recent non-user entries.
- Validate configured ranges and relationships, expose them in the generated config schema, and apply the resolved settings throughout Guardian v2 classification and approval review.

## Testing

- Cover boolean compatibility, configuration parsing and boundaries, config-manager rejection, and the resulting classifier request and approval decision.

GitOrigin-RevId: dc018b53b782e2d6b4d6a795cca4945130a71678

2026-08-14 19:11:41 +00:00

..

bin

Route exec-server HTTP through configured proxy policy (#35023)

2026-07-23 22:39:28 +00:00

external_agent_migration

Route curated plugin catalogs by authentication mode (#38429)

2026-08-13 20:20:01 +00:00

request_processors

Preserve thread subscriptions across revert reloads (#38463)

2026-08-14 00:27:39 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

app_server_tracing.rs

Reduce app-server JSON serialization overhead (#34761)

2026-07-22 14:16:51 +00:00

attestation.rs

fix(app-server): speed up shutdown (#23578)

2026-05-20 17:30:19 +00:00

auth_mode.rs

[codex] Add externally provided Codex auth (#31274)

2026-07-07 17:43:19 -07:00

bespoke_event_handling.rs

Extract persisted history types into a dedicated crate (#37871)

2026-08-10 19:26:52 +00:00

code_mode_host_tests.rs

Support gRPC code-mode hosts in app server (#38288)

2026-08-13 01:32:42 +00:00

code_mode_host.rs

Support gRPC code-mode hosts in app server (#38288)

2026-08-13 01:32:42 +00:00

command_exec.rs

Reduce response serialization and rollout scan overhead (#36006)

2026-07-29 18:29:26 +00:00

config_layer.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

config_manager_service_tests.rs

Make Guardian v2 risk classification configurable (#38628)

2026-08-14 19:11:41 +00:00

config_manager_service.rs

Embed defaults in the packaged config layer (#38179)

2026-08-12 12:15:47 +00:00

config_manager.rs

Configure PSP routing through the feature system (#38056)

2026-08-11 19:16:15 +00:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

effective_plugin_change_tests.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

effective_plugin_change.rs

Refresh MCP runtimes across thread startup (#35204)

2026-07-24 15:06:02 +00:00

error_code.rs

feat(app-server, threadstore): Thread pagination APIs and ThreadStore contract (#21566)

2026-05-07 15:44:43 -07:00

extensions.rs

Install Guardian V2 in the app server (#38597)

2026-08-14 15:59:34 +00:00

external_auth.rs

refactor: unify external auth resolution (#31421)

2026-07-07 17:05:05 -07:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

lib.rs

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

main_tests.rs

Support gRPC code-mode hosts in app server (#38288)

2026-08-13 01:32:42 +00:00

main.rs

Configure PSP routing through the feature system (#38056)

2026-08-11 19:16:15 +00:00

mcp_refresh.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

message_processor_tracing_tests.rs

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

message_processor.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

models_refresh_worker_tests.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models_refresh_worker.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models.rs

Expose model upgrade retirement times (#38449)

2026-08-13 22:59:54 +00:00

otel_reloader.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

outgoing_message.rs

Expose runtime activity in server diagnostics (#37486)

2026-08-07 18:38:24 +00:00

request_processors.rs

Carry environment config in turn selections (#38521)

2026-08-14 07:52:38 +00:00

request_serialization.rs

Expose runtime activity in server diagnostics (#37486)

2026-08-07 18:38:24 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

skills_watcher.rs

Stop re-exporting skill APIs from codex-core (#37984)

2026-08-11 10:43:11 +00:00

thread_state.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

thread_status.rs

Notify running turn watchers only on count changes (#38170)

2026-08-12 11:07:46 +00:00

transport_tests.rs

Timestamp app-server notifications at emission (#32905)

2026-07-14 00:38:04 +00:00

transport.rs

Exit the stdio app-server when its connection closes (#36035)

2026-07-29 22:00:20 +00:00