mirror of
https://github.com/openai/codex.git
synced 2026-10-18 17:18:52 +00:00
## Why Oversized tool arguments could make Guardian V2's model-visible action unbounded. ## What changed - Cap serialized actions at 10,000 tokens while preserving the trusted tool name and `call_id`. - Truncate nested string values evenly across the available budget. - Omit lower-priority fields when the JSON structure alone exceeds the limit, while retaining useful action fields when they fit. ## Testing Add coverage for oversized nested strings, arrays, and object keys, including spoofed identity fields and omission-marker collisions. GitOrigin-RevId: 13f7dc93da3761db18a34087225196318a3b8098