ioanbudea-OAI ad5e6e57a1 Bind memory consolidation permissions to the memory root (#59507) ...

## What changed

Configure managed memory consolidation agents with a `PermissionProfile` directly and explicitly bind both configuration and permission workspace roots to the memory directory. Keep network access disabled and exclude temporary directories from writable roots. Preserve disabled and externally managed parent permission profiles.

## Testing

Extend regression coverage to check that inherited workspace roots remain readable but are not writable, protected metadata stays read-only whether or not it exists, and incompatible permission constraints prevent agent configuration. Verify effective filesystem enforcement, network policy, and disabled approvals across parent permission profiles.

GitOrigin-RevId: b1ae115cade059da9e5fb83c218a1d89185b4a70

2026-11-04 22:43:34 +00:00

..

src

Bind memory consolidation permissions to the memory root (#59507)

2026-11-04 22:43:34 +00:00

templates

Add dedicated memory v2 consolidation and read prompts (#43813)

2026-09-08 12:58:11 +00:00

BUILD.bazel

build: run buildifier from just fmt (#28125)

2026-06-13 21:43:39 -07:00

Cargo.toml

feat: use provider defaults for memory models (#27129)

2026-06-09 23:49:09 +00:00