fix(agent): seal document approval content

tests/test_foreground_model_routing.py

@@ -16,6 +16,7 @@ import routes.chat_routes as chat_routes
 import routes.chat_helpers as chat_helpers
 import routes.prefs_routes as prefs_routes
 from src.request_models import ChatRequest
+from src.tool_approvals import document_content_digest
 from src.foreground_model_routing import (
     FOREGROUND_AVAILABILITY_STATUSES,
     MAX_FOREGROUND_FALLBACKS,
@@ -276,6 +277,7 @@ async def test_chat_stream_consumes_exact_tool_approval_for_own_session(monkeypa
         workspace=None,
         document_id="document-7",
         document_version=4,
+        document_digest=document_content_digest("original"),
         external_untrusted_context_seen=True,
         capabilities=capabilities_for_action("update_document", tool_content),
     )