jif 6fbd7be151 Add regression coverage for Guardian sandbox retry approvals (#54265) ...

## What changed

Add an integration test that approves a sandboxed `exec_command` attempt, simulates a sandbox denial, and denies the subsequent unsandboxed retry. Verify that Guardian reviews the retry separately with `require_escalated`, that the denied retry never reaches the executor, and that the tool result includes the denial rationale.

Use a fake executor to exercise the sandbox denial consistently across hosts.

GitOrigin-RevId: cd644255f7a7b7561c9e52a5b6e40f0859b70547

2026-10-15 11:24:07 +00:00

..

common

Keep discovered Apps tools available during startup recovery (#53672)

2026-10-13 13:59:41 +00:00

remote_env_windows

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

suite

Add regression coverage for Guardian sandbox retry approvals (#54265)

2026-10-15 11:24:07 +00:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

mcp_trace_propagation.rs

Preserve MCP request trace context across transport workers (#47212)

2026-09-22 06:47:07 +00:00

responses_headers.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

windows_sandbox.rs

Move Windows sandbox tests into a dedicated integration binary (#51678)

2026-10-07 12:47:04 +00:00