Use workspace requirements for guardian prompt override#14727
Use workspace requirements for guardian prompt override#14727charley-oai merged 1 commit intomainfrom
Conversation
|
@codex review this |
|
Codex Review: Didn't find any major issues. 👍 ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
@codex review this |
1 similar comment
|
@codex review this |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 40497fe276
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex review this |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b09018e8e0
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
b01f0f4 to
669c355
Compare
|
@codex review this |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 669c355e3d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex review this |
|
Codex Review: Didn't find any major issues. Delightful! ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
daaf0a7 to
c118813
Compare
|
@codex review |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c118813b93
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
2dbd71e to
ad34a47
Compare
Move guardian_developer_instructions into enterprise-managed requirements.toml, keep the bundled guardian policy as the default fallback, treat blank overrides as absent during merge, and keep the guardian prompt sync note enterprise-generic. Co-authored-by: Codex <noreply@openai.com>
9e815ed to
c830857
Compare
|
@codex review |
|
Codex Review: Didn't find any major issues. Already looking forward to the next diff. ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Summary
guardian_developer_instructionsfrom managed config into workspace-managedrequirements.tomlContext
This replaces the earlier managed-config / MDM rollout plan.
The intended rollout path is workspace-managed requirements, including cloud enterprise policies, rather than backend model metadata, Statsig, or Jamf-managed config. That keeps the default/fallback behavior local to
codex-rswhile allowing faster policy updates through the enterprise requirements plane.This is intentionally an admin-managed policy input, not a user preference: the guardian prompt should come either from the bundled
codex-rsdefault or from enterprise-managedrequirements.toml, and normal user/project/session config should not override it.Updating The OpenAI Prompt
After this lands, the OpenAI-specific guardian prompt should be updated through the workspace Policies UI at
/codex/settings/policiesrather than through Jamf or codex-backend model metadata.Operationally:
requirements.tomlpolicy, or a higher-precedence group-scoped override if we ever want different behavior for a subset of usersguardian_developer_instructions = """..."""to the full OpenAI-specific guardian prompt textcodex-rsfetches the effective requirements file from/wham/config/requirementsWhen updating the OpenAI-specific prompt, keep it aligned with the shared default guardian policy in
codex-rsexcept for intentional OpenAI-only additions.Testing
cargo check --tests -p codex-core -p codex-config -p codex-cloud-requirements --message-format shortcargo run -p codex-core --bin codex-write-config-schemacargo fmtgit diff --check