codex

mirror of https://github.com/openai/codex.git synced 2026-08-23 13:09:46 +00:00

Files

jif d12a7f3fd8 Preserve root user authorization in subagent Guardian reviews (#39975 )

## Why

MultiAgent V2 workers can be reviewed after the root conversation has received
new user authorization that is absent from the worker's own transcript. Guardian
reviews need that genuine user context without treating forwarded or
assistant-authored claims as authorization.

## What changed

- Add the bounded root conversation to Guardian prompts for worker reviews.
- Preserve user and assistant roles, and explicitly treat only root user messages
  as authorization evidence.
- Exclude summaries, review artifacts, and assistant commentary from the root
  conversation evidence.
- Apply the same evidence to both core Guardian prompts and Guardian V2
  classification.

## Testing

Add an integration test covering late root-user authorization, forged role text,
forwarded agent claims, and filtered synthetic authorization.

GitOrigin-RevId: 8846de69ba214a88f58f70675798d324e213427c

2026-08-21 17:12:42 +00:00

agent

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

connectors

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

extension-api

Enforce environment MCP policies (#39335 )

2026-08-19 01:26:16 +00:00

git-attribution

Apply Codex attribution to app-created commits (#38419 )