viyatb-oai 370bed4bf4 fix: trust-gate project hooks and exec policies (#14718) ...

## Summary
- trust-gate project `.codex` layers consistently, including repos that
have `.codex/hooks.json` or `.codex/execpolicy/*.rules` but no
`.codex/config.toml`
- keep disabled project layers in the config stack so nested trusted
project layers still resolve correctly, while preventing hooks and exec
policies from loading until the project is trusted
- update app-server/TUI onboarding copy to make the trust boundary
explicit and add regressions for loader, hooks, exec-policy, and
onboarding coverage

## Security
Before this change, an untrusted repo could auto-load project hooks or
exec policies from `.codex/` as long as `config.toml` was absent. This
makes trust the single gate for project-local config, hooks, and exec
policies.

## Stack
- Parent of #15936

## Test
- cargo test -p codex-core without_config_toml

---------

Co-authored-by: Codex <noreply@openai.com>

2026-04-17 17:56:58 -07:00

..

auth

tui: route device-code auth through app server (#16827)

2026-04-06 15:47:26 -07:00

snapshots

fix: trust-gate project hooks and exec policies (#14718)

2026-04-17 17:56:58 -07:00

auth.rs

fix: propagate log db (#17953)

2026-04-15 20:25:53 +01:00

mod.rs

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

onboarding_screen.rs

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

trust_directory.rs

fix: trust-gate project hooks and exec policies (#14718)

2026-04-17 17:56:58 -07:00

welcome.rs

tui: route device-code auth through app server (#16827)

2026-04-06 15:47:26 -07:00