Ankush Gupta 75e0b4088e Add opt-in Guardian trust for orchestrator connector identities (#52250) ...

## What changed

Add the disabled-by-default `guardian_trust_orchestrator_connectors` feature flag. When enabled, Guardian V2 accepts connectors with nonblank IDs from the host-owned plugin service orchestrator as a trusted source without requiring a matching user configuration declaration.

Distinguish orchestrator provenance from user configuration in trusted-tool context. Trust remains scoped to the exact server or connector identity and source; descriptions, outputs, other tools, and other connectors remain untrusted.

## Testing

Add coverage for host-owned connector context, rejection of extension-owned Apps lookalikes and blank connector IDs, source-specific trust metadata, and context token limits. Snapshot the connector approval request history.

GitOrigin-RevId: fbd87dd71110ca7b2b92d50eef02e1e739a74a02

2026-10-08 20:04:38 +00:00

..

profile

Preserve Guardian authorization evidence until request budgeting (#44570)

2026-09-10 16:02:36 +00:00

action_tests.rs

Centralize Guardian action preparation for review (#45987)

2026-09-16 16:59:47 +00:00

action.rs

Centralize Guardian action preparation for review (#45987)

2026-09-16 16:59:47 +00:00

authorization.rs

Fix Guardian retained context spacing and empty assistant handling (#48158)

2026-09-25 18:28:46 +00:00

budget_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

budget.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

composition_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

composition.rs

Stabilize Guardian snapshot prefixes by separating assistant context (#51627)

2026-10-07 09:07:52 +00:00

cursor_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

cursor.rs

Extract guardian transcript selection into guardian-context (#45417)

2026-09-14 12:52:16 +00:00

enforcement_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

enforcement.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

entry.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

history_tests.rs

Preserve independent Guardian history across parent compaction (#48779)

2026-09-27 20:15:23 +00:00

history.rs

Preserve independent Guardian history across parent compaction (#48779)

2026-09-27 20:15:23 +00:00

images_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

images.rs

Account for file images in context budgets and Guardian reviews (#46072)

2026-09-17 01:38:13 +00:00

lib.rs

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

node_repl.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

permissions.rs

Bind Guardian async scores to target environment permissions (#47830)

2026-09-24 12:34:04 +00:00

profile_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

profile.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

registry_tests.rs

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

retained_assistant_context.rs

Stabilize Guardian snapshot prefixes by separating assistant context (#51627)

2026-10-07 09:07:52 +00:00

retained_instructions_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

retained_instructions.rs

Fix retained context handling for typed section content (#51642)

2026-10-07 10:33:33 +00:00

reviews_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

reviews.rs

Avoid duplicate sync reviews in Guardian classifier continuations (#49795)

2026-10-01 01:13:29 +00:00

section.rs

Retain assistant context for Guardian authorization reviews (#47582)

2026-09-23 16:15:55 +00:00

sender_user_messages.rs

Include sender user messages in Guardian delegation reviews (#46179)

2026-09-17 10:02:38 +00:00

transcript_record.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

transcript_tests.rs

Keep Guardian transcript records structured through budget recovery (#51466)

2026-10-06 19:31:24 +00:00

transcript.rs

Handle partial answers consistently across agent workflows (#51249)

2026-10-06 03:27:04 +00:00

truncation_tests.rs

Add shared Guardian context primitives (#41392)

2026-08-28 19:02:26 +00:00

truncation.rs

Add aggregate budget enforcement for Guardian context (#44166)

2026-09-09 14:55:36 +00:00

trusted_skills_tests.rs

Trim Guardian tests and tighten request layout assertions (#46063)

2026-09-17 00:37:47 +00:00

trusted_skills.rs

Support ordered response items in world-state context updates (#50441)

2026-10-02 22:12:07 +00:00

trusted_tool_tests.rs

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

trusted_tool.rs

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

verified_answers.rs

Deduplicate retained instructions across Guardian reviews (#48060)

2026-09-25 10:49:50 +00:00