Sean Huang 9445ef227e Honor granular sandbox approvals in unified exec (#40024) ...

## What changed

- Use the shared approval-policy check for unified exec sandbox escalation so
  `require_escalated` commands can prompt when granular `sandbox_approval` is
  enabled and remain rejected when it is disabled.
- Add an approval scenario covering sandbox escalation with granular approvals
  enabled.

GitOrigin-RevId: 98907960cd9df181e1b2fd9d7fea11fa3c0ed7e6

2026-08-21 21:54:40 +00:00

..

code_mode

Interrupt active code-mode cells with their turn (#37483)

2026-08-07 18:22:42 +00:00

handlers

Honor granular sandbox approvals in unified exec (#40024)

2026-08-21 21:54:40 +00:00

runtimes

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

approvals_tests.rs

Use model-specific auto-review outcome instructions (#39741)

2026-08-20 16:52:16 +00:00

approvals.rs

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

context_tests.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

context.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

control_tool_analytics.rs

Track built-in control tool calls in analytics (#39510)

2026-08-19 15:55:38 +00:00

events.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

executed_tool_calls_tests.rs

Support standalone named function call outputs (#39782)

2026-08-20 19:19:41 +00:00

executed_tool_calls.rs

Support standalone named function call outputs (#39782)

2026-08-20 19:19:41 +00:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

hosted_spec.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

lifecycle.rs

Give Guardian V2 full tool action context (#38441)

2026-08-13 21:49:32 +00:00

mod.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

network_approval_tests.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

network_approval.rs

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

orchestrator.rs

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

parallel.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

registry_tests.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

registry.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

router_tests.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

router.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

sandboxing_tests.rs

Preserve filesystem permission path conventions (#39084)

2026-08-17 21:49:30 +00:00

sandboxing.rs

Cancel Guardian reviews with their tool calls (#40021)

2026-08-21 21:51:12 +00:00

spec_plan_tests.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

spec_plan.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

tool_dispatch_trace_tests.rs

Configure the default code-mode exec yield timeout (#37352)

2026-08-07 01:41:54 +00:00

tool_dispatch_trace.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

tool_namespaces_info.rs

Include tool namespace inventory in turn metadata (#37492)

2026-08-07 19:32:15 +00:00