SEC - CODEX AGENTS: idempotent audited tool writes

2026-05-14 20:12:29 +03:00
parent c9519b52d2
commit 2c1e83dd37
14 changed files with 503 additions and 75 deletions
@@ -92,7 +92,9 @@ Risk: network retry creates duplicate cards/comments.
 Mitigation:

 - required idempotency keys for write tools;
- store operation result by token and idempotency key.
+- store operation result by agent and idempotency key;
+- reject same key with different arguments;
+- release failed writes so safe retries can run again.

 ### Reporting mode false confidence