jif-oai 7e15e6db9e [codex] default unknown contributed tools to mutating (#22143) ...

## Summary
- make the shared `ToolExecutor::is_mutating` default conservative by
returning `true`
- update the trait docs to say read-only tools should opt out explicitly
- add a regression test covering the default behavior

## Why
Hosts use this signal for serialization and approval policy. Treating
unknown contributed tools as read-only lets a write-capable tool
accidentally bypass mutating-tool safeguards if it forgets to override
the hook.

## Validation
- not run, per request

2026-05-11 14:39:21 +02:00

..

src

[codex] default unknown contributed tools to mutating (#22143)

2026-05-11 14:39:21 +02:00

BUILD.bazel

…

Cargo.toml

…