Unclear Whether unattended foreign reads are actually allowed to proceed depends on the tengu_artifact_foreign_read_unasked gate, which has not been read for this release.
A new consent system now governs a set of sensitive artifact operations: deleting an artifact, changing whether it's public, changing who can access it, standing (recurring) jobs, and reading an artifact someone else owns. Approving one of these actions can now cover its related files for the rest of the conversation, so the same consent isn't asked for repeatedly. A new telemetry event also records when a foreign (someone else's) artifact is read without being asked about first.
This reduces repeated approval prompts for related artifact actions within a single conversation, while still tracking cases where a foreign read happens without an explicit ask.
Whether unattended foreign reads are actually allowed to proceed depends on the `tengu_artifact_foreign_read_unasked` gate, which has not…