openclaw/docs/plugins/sdk-entrypoints
Vincent Koc 6834c5fe96
fix(codex): authorize canonical sandbox reads (#150731)
* fix(codex): authorize canonical sandbox reads

* fix(sandbox): integrate canonical read authorization with current main

Preserve source-bearing reads and current filesystem owners while binding policy checks to admitted paths. Keep identity-validation failures distinct from missing paths.

Local integration checkpoint for PR #150731. Remote tests and changed checks remain pending; this commit is not landing qualification.

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-10-03 00:26:11 +08:00
..
define-channel-plugin-entry.md
define-plugin-entry.md perf(sessions): reuse catalog planning across polls (#159900) 2026-09-27 21:47:45 +00:00
define-setup-plugin-entry.md
define-tool-plugin.md feat(code-mode): infer results from the requested action (#147291) 2026-09-13 13:33:49 -07:00
native-providers.md
package-entries.md
registration-mode.md
tool-policy-and-sandbox.md fix(codex): authorize canonical sandbox reads (#150731) 2026-10-03 00:26:11 +08:00