jif 851d9e95f1 Bind Guardian reviews to the action's target environment (#47630) ...

## Why

Actions targeting a secondary environment could be reviewed with the primary environment's denied-read restrictions. Each review needs the permission context of the environment that owns the action, including when a Guardian session is reused across environments.

## What changed

- Carry `environment_id` through environment-scoped approval requests and their planned-action JSON.
- Select and label permission context using the target environment, explicitly stating when it has no denied-read paths or globs.
- Reject reviews for unavailable target environments and reject environment IDs longer than 256 bytes before Guardian inference, while preserving manual approval routing for oversized IDs.

## Testing

Add coverage for `exec_command`, `apply_patch`, and `request_permissions` reviews switching environments while preserving the existing review prefix. Extend tests for environment-specific restrictions, unavailable environments, action serialization, and the 256-byte ID boundary.

GitOrigin-RevId: ad3292edddb1c6f5b180142c6857cba6f1308328

2026-09-23 19:03:12 +00:00

..

profile

Preserve Guardian authorization evidence until request budgeting (#44570)

2026-09-10 16:02:36 +00:00

action_tests.rs

Centralize Guardian action preparation for review (#45987)

2026-09-16 16:59:47 +00:00

action.rs

Centralize Guardian action preparation for review (#45987)

2026-09-16 16:59:47 +00:00

authorization.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

budget_tests.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

budget.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

composition_tests.rs

Include sender user messages in Guardian delegation reviews (#46179)

2026-09-17 10:02:38 +00:00

composition.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

cursor_tests.rs

Extract guardian transcript selection into guardian-context (#45417)

2026-09-14 12:52:16 +00:00

cursor.rs

Extract guardian transcript selection into guardian-context (#45417)

2026-09-14 12:52:16 +00:00

enforcement_tests.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

enforcement.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

entry.rs

Preserve Guardian authorization evidence until request budgeting (#44570)

2026-09-10 16:02:36 +00:00

history_tests.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

history.rs

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

images_tests.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

images.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

lib.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

node_repl.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

permissions.rs

Bind Guardian reviews to the action's target environment (#47630)

2026-09-23 19:03:12 +00:00

profile_tests.rs

Preserve Guardian authorization evidence until request budgeting (#44570)

2026-09-10 16:02:36 +00:00

profile.rs

Preserve Guardian authorization evidence until request budgeting (#44570)

2026-09-10 16:02:36 +00:00

registry_tests.rs

Bind Guardian reviews to the action's target environment (#47630)

2026-09-23 19:03:12 +00:00

retained_instructions_tests.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

retained_instructions.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

reviews_tests.rs

Centralize bounded Guardian review evidence in guardian-context (#43595)

2026-09-07 21:20:31 +00:00

reviews.rs

Centralize bounded Guardian review evidence in guardian-context (#43595)

2026-09-07 21:20:31 +00:00

section.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

sender_user_messages.rs

Include sender user messages in Guardian delegation reviews (#46179)

2026-09-17 10:02:38 +00:00

transcript_tests.rs

Consolidate Guardian tests at shared policy and context boundaries (#46064)

2026-09-17 00:39:08 +00:00

transcript.rs

Preserve Guardian authorization evidence until request budgeting (#44570)

2026-09-10 16:02:36 +00:00

truncation_tests.rs

Add shared Guardian context primitives (#41392)

2026-08-28 19:02:26 +00:00

truncation.rs

Add aggregate budget enforcement for Guardian context (#44166)

2026-09-09 14:55:36 +00:00

trusted_skills_tests.rs

Trim Guardian tests and tighten request layout assertions (#46063)

2026-09-17 00:37:47 +00:00

trusted_skills.rs

Move trusted skill evidence into the Guardian context registry (#43599)

2026-09-07 21:38:25 +00:00

trusted_tool_tests.rs

Move trusted tool metadata into shared Guardian context (#43597)

2026-09-07 21:29:31 +00:00

trusted_tool.rs

Move trusted tool metadata into shared Guardian context (#43597)

2026-09-07 21:29:31 +00:00

verified_answers.rs

Recover missing Guardian root instructions in acceptance order (#43472)

2026-09-07 13:40:29 +00:00