sayan-oai e38290846c
Enforce environment-specific command policies ( #38942 ) ...
## What changed
- Add an optional restrictive execution policy to `EnvironmentConfig` and merge it over the active command policy for shell execution and approval decisions.
- Reject environment policies that contain allow rules, so environment configuration can only tighten command access.
- Include the environment policy fingerprint in cached approval keys so policy changes require fresh session approvals.
## Testing
- Cover restrictions overriding saved prefix approvals, policy changes invalidating session approvals, and environment overlays remaining effective when model-specific prefix filtering is active.
GitOrigin-RevId: e94f877549ed5e0f577b8cb52f3c1872c58f029d
2026-08-17 04:37:50 +00:00
2026-07-29 13:53:15 +00:00
2026-08-17 04:01:37 +00:00
2026-07-29 13:53:15 +00:00
2026-08-17 04:01:37 +00:00
2026-08-13 13:57:25 +00:00
2026-08-17 04:01:37 +00:00
2026-07-30 19:47:30 +00:00
2026-08-17 04:01:37 +00:00
2026-08-16 06:48:59 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-08-12 22:58:46 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-13 19:35:22 +00:00
2026-08-17 00:09:44 +00:00
2026-08-13 19:35:22 +00:00
2026-08-13 19:35:22 +00:00
2026-08-14 20:42:35 +00:00
2026-08-15 21:26:28 +00:00
2026-08-14 22:40:19 +00:00
2026-08-05 16:09:01 +00:00
2026-08-15 01:34:33 +00:00
2026-07-30 21:49:53 +00:00
2026-08-13 23:13:37 +00:00
2026-08-14 19:57:04 +00:00
2026-08-04 22:58:02 +00:00
2026-08-16 20:27:05 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-17 04:37:50 +00:00
2026-08-14 21:17:29 +00:00
2026-08-15 05:28:53 +00:00
2026-08-07 11:30:17 +00:00
2026-08-13 00:00:16 +00:00
2026-08-17 04:01:37 +00:00
2026-08-17 04:17:45 +00:00
2026-08-14 23:42:40 +00:00
2026-08-17 04:37:50 +00:00
2026-08-14 19:11:41 +00:00
2026-08-14 13:44:51 +00:00
2026-08-14 19:11:41 +00:00
2026-08-07 19:56:29 +00:00
2026-07-31 21:37:56 +00:00
2026-08-10 15:50:53 +00:00
2026-08-14 12:16:51 +00:00
2026-08-17 04:17:45 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-14 05:03:39 +00:00
2026-08-15 14:31:04 +00:00
2026-08-13 19:35:22 +00:00
2026-08-14 13:44:51 +00:00
2026-08-14 18:01:06 +00:00
2026-08-14 01:23:59 +00:00
2026-08-14 18:26:20 +00:00
2026-08-14 23:42:40 +00:00
2026-07-30 04:26:36 +00:00
2026-08-13 02:40:49 +00:00
2026-08-10 14:25:13 +00:00
2026-08-13 01:52:02 +00:00
2026-08-17 04:37:50 +00:00
2026-08-15 01:34:33 +00:00
2026-08-13 23:29:52 +00:00
2026-08-17 04:01:37 +00:00
2026-08-06 03:11:42 +00:00
2026-08-14 11:47:12 +00:00
2026-08-10 15:43:10 +00:00
2026-08-13 18:30:51 +00:00
2026-08-08 16:58:26 +00:00
2026-08-14 01:49:00 +00:00
2026-08-17 04:01:37 +00:00
2026-08-04 03:49:53 +00:00
2026-08-13 19:35:22 +00:00
2026-08-17 04:01:37 +00:00
2026-08-14 05:49:33 +00:00
2026-08-17 04:01:37 +00:00
2026-08-13 23:29:52 +00:00
2026-08-14 22:28:33 +00:00
2026-08-15 14:31:04 +00:00
2026-08-17 00:09:44 +00:00
2026-08-15 11:01:30 +00:00
2026-07-28 20:49:22 +00:00
2026-07-29 13:53:15 +00:00
2026-08-11 23:40:07 +00:00
sayan-oai
e38290846c