jif a7e9fb5480 Constrain Guardian reviews to parent filesystem permissions (#38377) ...

## Why

Guardian review sessions must not gain access to paths that the parent turn is
not allowed to read.

## What changed

- Derive Guardian permissions by intersecting managed parent filesystem rules
  with read-only access, preserving denied paths and restricting network access.
- Offer Guardian execution tools only when a managed sandbox can enforce those
  rules.
- Include the selected environment IDs in the review-session reuse key so a
  session is not reused across different environment sets.

## Testing

Update the Guardian reuse integration test to verify that a review cannot read
a parent-denied file or write a local file while consecutive reviews still
reuse the same session.

GitOrigin-RevId: 20f17a6c379f1eda651e8508459d642a51e4ce94

2026-08-13 13:41:08 +00:00

..

common

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

remote_env_windows

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

suite

Constrain Guardian reviews to parent filesystem permissions (#38377)

2026-08-13 13:41:08 +00:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_headers.rs

Include sandbox mode in response metadata (#37507)

2026-08-07 22:41:20 +00:00