codex

mirror of https://github.com/openai/codex.git synced 2026-09-10 20:26:47 +00:00

Files

jif 663eb5fbdd Invalidate cached Guardian approvals for unscored permission widening (#44617 )

## Why

An unscored `exec_command` requesting additional permissions could reuse an earlier Guardian v2 approval score, even though that score did not cover the expanded permissions.

## What changed

When `UnscoredAction::AgeScore` applies, invalidate the cached score for default-namespace `exec_command` calls with `sandbox_permissions` set to `with_additional_permissions` by marking the call as a scoring failure.

## Testing

Extend the review-scope regression test to verify that an ordinary sandboxed command preserves cached approval, while a command requesting additional network permissions clears it and causes review to fail closed with `scoring_failure`.

GitOrigin-RevId: d6e3e1ec7d618dff2ef03ffcb92869249f0e547a

2026-09-10 18:47:31 +00:00

agent

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

connectors

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

extension-api

Allow extensions to select MCP protocol mode per HTTP server (#44571 )

2026-09-10 16:02:59 +00:00

git-attribution

Apply Codex attribution to app-created commits (#38419 )