Rename the PermissionRequest advisory field to guardian_review, drop the redundant source field, and share one hook-side guardian review type with protocol risk and authorization enums.
Co-authored-by: Codex <noreply@openai.com>
Run guardian before Bash PermissionRequest hooks when approvals are already routed to guardian, pass the review into the hook input as advisory context, and reuse the guardian decision when hooks stay quiet.
Co-authored-by: Codex <noreply@openai.com>
