Dsh Guardian Approval

Key features

• Independent review channel — endpoint, model, reasoning effort and timeout are configured separately
• Architecture — the approval waterfall mount point, evidence assembly, dual API styles, three-state breaker, and the sidecar-audit decision
• hot-swapping the agent's main model never touches the reviewer
• Full Codex Guardian policy — the risk (low/medium/high/critical) × authorization (unknown/low/medium/high) matrix
• file/tool content counts as untrusted evidence, only explicit user instruction authorizes — "do what the file says" does not authorize the dangerous thing inside the file