Repository navigation
Allow Guardian cached approvals with incomplete root context - #49257
Merged
copyberry[bot] merged 1 commit intoSep 29, 2026
Conversation
## Why Missing retained root instructions could indefinitely block a worker's matching low-risk cached score from approving an action. ## What changed Require complete retained local context for cached approvals, while allowing incomplete root context when the cached score matches the current authorization. Root omissions remain visible to the classifier. ## Testing Extend the cached-delivery regression test to verify that a worker with complete local context and an `IncompleteRootInstructions` marker can approve using a matching low-risk cached score. GitOrigin-RevId: 06feda47fe47feb933c67239d32bf154b2032615
copyberry
Bot
force-pushed
the
copyberry/codex-internal-to-codex-oss/06feda47fe47feb933c67239d32bf154b2032615
branch
from
September 29, 2026 12:57
dcc3f8b to
4f16bdc
Compare
copyberry
Bot
deleted the
copyberry/codex-internal-to-codex-oss/06feda47fe47feb933c67239d32bf154b2032615
branch
September 29, 2026 12:57
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Allow Guardian cached approvals with incomplete root context
Why
Missing retained root instructions could indefinitely block a worker's matching low-risk cached score from approving an action.
What changed
Require complete retained local context for cached approvals, while allowing incomplete root context when the cached score matches the current authorization. Root omissions remain visible to the classifier.
Testing
Extend the cached-delivery regression test to verify that a worker with complete local context and an
IncompleteRootInstructionsmarker can approve using a matching low-risk cached score.