Gemini CLI's AllowedPathChecker Was Silently Never Registered in autoEdit Mode

GitHub·medium signalXBlueskyLinkedInCopy link

PR 28961, merged 2026-08-24, found that write.toml declared safety checkers as nested [rule.safety_checker] tables while PolicyFileSchema only reads top-level [[safety_checker]] arrays. Unrecognized sub-tables are discarded during schema validation, so loadPoliciesFromToml never registered AllowedPathChecker for the write_file and replace tools in autoEdit mode. The fix realigns the declaration and adds toml-loader tests asserting both tools extract the checker with the expected priorities, a reminder that a policy file that parses is not a policy that loads.