Skip to content

Avoid reinjecting permissions after command approvals - #36800

Merged
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/e6f68c6a91be82750e70e28456f2b7c58607fbd8
Aug 3, 2026
Merged

Avoid reinjecting permissions after command approvals#36800
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/e6f68c6a91be82750e70e28456f2b7c58607fbd8

Conversation

@copyberry

@copyberry copyberry Bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Avoid reinjecting permissions after command approvals

What changed

  • Track approved command prefixes separately from the stable permissions
    instructions in world-state snapshots.
  • Emit only newly approved prefixes after an exec-policy amendment instead of
    appending the full permissions block again.
  • Preserve prefix updates when full permissions instructions are disabled and
    remain compatible with legacy world-state snapshots.

Testing

  • Cover incremental prefix additions, removals, legacy snapshots, history
    rollback, and approval flows with permissions instructions enabled or disabled.

@felixxia-oai copyberry
Avoid reinjecting permissions after command approvals (#36800)
1bbfb5c 
## What changed

- Track approved command prefixes separately from the stable permissions
  instructions in world-state snapshots.
- Emit only newly approved prefixes after an exec-policy amendment instead of
  appending the full permissions block again.
- Preserve prefix updates when full permissions instructions are disabled and
  remain compatible with legacy world-state snapshots.

## Testing

- Cover incremental prefix additions, removals, legacy snapshots, history
  rollback, and approval flows with permissions instructions enabled or disabled.

GitOrigin-RevId: e6f68c6a91be82750e70e28456f2b7c58607fbd8
@copyberry
copyberry Bot force-pushed the copyberry/codex-internal-to-codex-oss/e6f68c6a91be82750e70e28456f2b7c58607fbd8 branch from b6b196c to 1bbfb5c Compare August 3, 2026 21:38
@copyberry
copyberry Bot merged commit 1bbfb5c into main Aug 3, 2026
30 of 32 checks passed
@copyberry
copyberry Bot deleted the copyberry/codex-internal-to-codex-oss/e6f68c6a91be82750e70e28456f2b7c58607fbd8 branch August 3, 2026 21:39
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 3, 2026

This branch was previously deployed

1 inactive deployment
issue-triage — 1bbfb5cf Deployed Aug 3, 2026 by KyleBrierley via Generate label suggestions #35952
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

6 participants

@konard @shtse8 @KyleBrierley @justusaugust @antoniochrist42005-rgb @felixxia-oai