AGENT → POLICY → TOOL
An agent can ask.
Your policy decides.
Inspect a proposed tool action before it reaches a file, a recipient, or a shell.
A small, deterministic prototype with fake data. No model calls, real tools, messages, or file operations.
02 / PROPOSED ACTIONEDITABLE JSON
View scenario context untrusted input
Synthetic requests only. Do not paste real data or credentials.
03 / POLICY OUTCOME
DECISION
Ready to evaluate
Choose a scenario and inspect the proposed action.
No decision yet
Approves this exact request once inside the simulation. Changing the request invalidates the approval.
TOOL BOUNDARY
No action performed.
Fixed demo policy
- Read only the public workspace.
- Restrict recipients and sensitive markers.
- Protect private files from deletion.
- Review allowed high-impact actions.
- Deny unrestricted shell and unknown tools.
Decision trail
In-memory outcome metadata only. Cleared on reload.
| Step | Proposed tool | Decision | Policy rule |
|---|---|---|---|
| Evaluate a request to see its decision. | |||