jif ed1b92fa45 Add opt-in synchronous Guardian review for native tool calls (#57433) ...

## What changed

- Add `CoreToolRuntime::requires_guardian_review` to review opted-in function calls before dispatch and stop execution when review rejects the call.
- Deliver proposed calls as native review evidence, preserving encrypted argument metadata. When hooks rewrite arguments, review the updated arguments and discard the original encrypted replay content.
- Deduplicate native call evidence against reviewer history and include paired evidence outputs in input budgets.
- Keep review accounting and metrics for native calls without emitting action-specific client assessment events, and omit approval payloads from debug output.

## Testing

Extend regression coverage for rewritten native calls across review retries, denied calls that never execute their handlers, oversized native evidence, and review metrics without client events.

GitOrigin-RevId: c3b22c0220344581c2b38f233001abaed49cba34

2026-10-27 11:37:24 +00:00

..

tests

Report turn critical-path timing in analytics (#57209)

2026-10-26 19:35:31 +00:00

accepted_lines.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

analytics_capture.rs

[codex-analytics] Analytics Capture to File in Debug Builds (#27093)

2026-06-15 16:32:38 -07:00

client_product_tests.rs

Route FedRAMP API keys to government endpoints by default (#57178)

2026-10-26 18:20:30 +00:00

client_tests.rs

Route FedRAMP API keys to government endpoints by default (#57178)

2026-10-26 18:20:30 +00:00

client.rs

Route FedRAMP API keys to government endpoints by default (#57178)

2026-10-26 18:20:30 +00:00

events.rs

Add opt-in synchronous Guardian review for native tool calls (#57433)

2026-10-27 11:37:24 +00:00

facts.rs

Report turn critical-path timing in analytics (#57209)

2026-10-26 19:35:31 +00:00

guardian_v2.rs

Record Guardian context mode in review and classification telemetry (#49294)

2026-09-29 16:09:48 +00:00

lib.rs

Report turn critical-path timing in analytics (#57209)

2026-10-26 19:35:31 +00:00

product_attribution.rs

Track CUA tool call starts and deduplicate lifecycle events (#57167)

2026-10-26 17:57:13 +00:00

reducer.rs

Report turn critical-path timing in analytics (#57209)

2026-10-26 19:35:31 +00:00

thread_hint.rs

Track history notes thread hint outcomes (#42247)

2026-09-02 09:12:17 +00:00

turn_critical_path.rs

Report turn critical-path timing in analytics (#57209)

2026-10-26 19:35:31 +00:00