mirror of
https://github.com/openai/codex.git
synced 2026-09-20 12:47:38 +00:00
fcf05456bb
## Why Asynchronous score publication updated the risk score, authorization, and tool-call coverage separately. Approval checks could therefore read inconsistent evidence when deciding whether to reuse a cached score. ## What changed Keep Guardian's cached score and observation state under one lock, and use consistent snapshots for approval checks. Publish successful scores together with their authorization and classified tool-call index. Preserve timestamp ordering, fail-closed precedence on timestamp ties, and per-call oversized-action tracking. ## Testing Add regression coverage for rejected delayed results and timestamp ties. Add a gated integration test showing that a delayed score becomes stale after intervening tool calls, while a sufficiently fresh score permits cached approval. GitOrigin-RevId: 8df6fafd5e0ee59aa0f78f541eac562efce3d4d0