cooper-oai c4513cb982 Prevent launch context from reaching child processes (#37607) ...

## Why

Model-reachable child processes should not inherit Codex launch context.

## What changed

- Treat `OPENAI_FEDERATION_RULE_ID` and `OPENAI_IDENTITY_TOKEN_FILE` as non-inheritable environment variables, with case-insensitive matching.
- Remove them after shell environment policy overrides and before spawning commands across execution, MCP, hooks, Git helpers, and remote helper processes.

## Testing

- Cover inherited and explicitly configured variants, including mixed-case names.
- Verify the variables are absent from real child environments and app-server command and process execution.

GitOrigin-RevId: 2535527893985fef0995617f4c5b2462bea7c136

2026-08-08 16:58:26 +00:00

..

src

Prevent launch context from reaching child processes (#37607)

2026-08-08 16:58:26 +00:00

BUILD.bazel

Code mode on v8 (#15276)

2026-03-20 23:36:58 -07:00

Cargo.toml

Prevent launch context from reaching child processes (#37607)

2026-08-08 16:58:26 +00:00