Skip Guardian reviews in Full Access - #42147
Merged
copyberry[bot] merged 1 commit intoSep 1, 2026
Merged
Conversation
## Why Full Access already combines `approvalPolicy: "never"` with unrestricted permissions, so confirmation-only actions do not require a model review. ## What changed - Detect Full Access consistently across the thread and every selected environment. Pending, failed, or restricted environments are not treated as Full Access. - Approve confirmation-only Guardian and MCP requests without synchronous review, sampler prewarming, or background scoring. Cancellation, explicit denials, and forms that require user input keep their existing behavior. - Re-evaluate the active permission state on each turn so an existing thread can enter or leave Full Access safely. ## Testing Added coverage for switching approval modes, strict sensitive MCP confirmations, failed and pending environments, and suppression of Guardian requests and background-scoring connections. GitOrigin-RevId: 089ab4296dde473b8e33ab8324be79c5446c46f6
copyberry
Bot
force-pushed
the
copyberry/codex-internal-to-codex-oss/089ab4296dde473b8e33ab8324be79c5446c46f6
branch
from
September 1, 2026 22:18
9f19368 to
e576993
Compare
copyberry
Bot
deleted the
copyberry/codex-internal-to-codex-oss/089ab4296dde473b8e33ab8324be79c5446c46f6
branch
September 1, 2026 22:19
lots0logs
temporarily deployed
to
issue-triage
September 1, 2026 22:22 — with 
GitHub Actions
Inactive
lots0logs
temporarily deployed
to
issue-triage
September 1, 2026 22:22 — with
GitHub Actions
Inactive
lots0logs
temporarily deployed
to
issue-triage
September 1, 2026 22:22 — with
GitHub Actions
Inactive
lots0logs
temporarily deployed
to
issue-triage
September 1, 2026 22:24 — with
GitHub Actions
Inactive
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Skip Guardian reviews in Full Access
Why
Full Access already combines
approvalPolicy: "never"with unrestrictedpermissions, so confirmation-only actions do not require a model review.
What changed
environment. Pending, failed, or restricted environments are not treated as
Full Access.
review, sampler prewarming, or background scoring. Cancellation, explicit
denials, and forms that require user input keep their existing behavior.
can enter or leave Full Access safely.
Testing
Added coverage for switching approval modes, strict sensitive MCP
confirmations, failed and pending environments, and suppression of Guardian
requests and background-scoring connections.