iceweasel-oai 87f71e35b8 Skip missing paths in filesystem sandbox entries (#34598) ...

## Why

Default read-only protections for project metadata should apply when paths such
as `.git`, `.agents`, and `.codex` exist, without causing sandbox setup to
materialize missing paths as ACL targets.

## What changed

- Add an optional `missing_path_behavior` to filesystem sandbox entries and
  mark default project-metadata protections with `skip`.
- Preserve the behavior through permission transforms and exec/MCP protocol
  serialization while keeping existing path wire variants stable.
- Ignore skip-missing entries when projecting configuration or Windows sandbox
  overrides, while retaining explicit metadata carveouts.

## Testing

- Cover protocol round trips for path and special-path entries.
- Verify default metadata protections and Windows explicit carveout handling.

GitOrigin-RevId: 6df13dadacdd131c44aab9f15a967c81051355c1

2026-07-21 19:17:18 +00:00

..

src

Skip missing paths in filesystem sandbox entries (#34598)

2026-07-21 19:17:18 +00:00

tests

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

BUILD.bazel

[codex] Shard exec Bazel integration test (#19862)

2026-04-27 21:22:53 +00:00

Cargo.toml

Move cloud requirements crate to cloud config (#24621)

2026-06-01 16:43:52 -07:00