3 Commits

Author	SHA1	Message	Date
Michael Bolin	40bf11bd52	chore: fix the build breakage that came from a merge race (#10239) ... I think I needed to rebase on top of https://github.com/openai/codex/pull/10167 before merging https://github.com/openai/codex/pull/10208.	2026-01-30 10:29:54 -08:00
gt-oai	5662eb8b75	Load exec policy rules from requirements (#10190) ... `requirements.toml` should be able to specify rules which always run. My intention here was that these rules could only ever be restrictive, which means the decision can be "prompt" or "forbidden" but never "allow". A requirement of "you must always allow this command" didn't make sense to me, but happy to be gaveled otherwise. Rules already applies the most restrictive decision, so we can safely merge these with rules found in other config folders.	2026-01-30 18:04:09 +00:00
gt-oai	e85d019daa	Fetch Requirements from cloud (#10167) ... Load requirements from Codex Backend. It only does this for enterprise customers signed in with ChatGPT. Todo in follow-up PRs: * Add to app-server and exec too * Switch from fail-open to fail-closed on failure	2026-01-30 12:03:29 +00:00