Dylan Hurd e783dab44c fix(exec-policy) use is_known_safe_command less (#20305) ...

## Summary
Restricts behavior of `is_known_safe_command` only to modes where it is
explicitly part of the documented behavior:
- when `environment_lacks_sandbox_protections`
- in `AskForApproval::UnlessTrusted`

Notably, as a result of this, escalations for commands that pass
`is_known_safe_commands` are no longer auto-approved in
AskForApproval::OnRequest or AskForApproval::Granular.

## Testing
- [x] Updated unit tests
- [x] Updated approvals scenario tests.

---------

Co-authored-by: Codex <noreply@openai.com>

2026-05-11 11:37:53 -07:00

..

common

extension: wire extension registries into sessions (#21737)

2026-05-11 11:38:18 +02:00

fixtures

Update tests to stop using sse_completed fixture (#10638)

2026-02-04 08:38:06 -08:00

suite

fix(exec-policy) use is_known_safe_command less (#20305)

2026-05-11 11:37:53 -07:00

all.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

cli_responses_fixture.sse

Add CLI streaming integration tests (#1542)

2025-07-12 18:05:58 -07:00

responses_headers.rs

[codex] request desktop attestation from app (#20619)

2026-05-08 12:36:02 -07:00