swastik-oai 823ea830c0 Preserve trusted-tool context in Guardian Decisions requests (#51070) ...

## Why

The Decisions adapter rejected developer messages, including host-annotated trusted-tool context. Requests containing that context could not be classified.

## What changed

Append developer text annotated with `TrustedTool::KIND` to the classification rubric, preserving its authority while keeping user evidence in the input messages. Accept only a single text part with a single matching annotation; continue rejecting other developer messages and unsupported evidence.

## Testing

Add a regression test covering trusted-tool context alongside untrusted user text, plus rejection of incorrect roles, missing or mismatched annotations, multiple annotations or content parts, and image content.

GitOrigin-RevId: 65b6301b2ee1ac54d67275978ccb5e37dcac7c16

2026-10-05 10:16:03 +00:00

..

src

Preserve trusted-tool context in Guardian Decisions requests (#51070)

2026-10-05 10:16:03 +00:00

tests

Preserve the async Guardian history prefix as retained context changes (#49993)

2026-10-01 14:48:02 +00:00

BUILD.bazel

Add shared Guardian context primitives (#41392)

2026-08-28 19:02:26 +00:00

Cargo.toml

Move trusted tool metadata into shared Guardian context (#43597)

2026-09-07 21:29:31 +00:00