Check the premises an action relies on
check_premisesStage 1 of the pre-action guard. Given the action you are about to take and the PINNED subject ids it relies on, returns allow/hold/deny per premise plus a short-lived lease for each cleared one. Takes subject ids, never a natural-language question — retrieval wording cannot change the verdict. Do the work, then call verify_premises with these leases IMMEDIATELY before acting. Fails closed: an unknown pin, an unreadable record or a premise that cannot be leased all return hold, never allow.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| surface | No | Optional: the external system the action concerns, forwarded to the guard for observation scoping. | |
| premises | Yes | The configured premises the intended action relies on. Pinned ids only; this tool never searches. | |
| intended_action | Yes | What the caller is about to do, as a short stable string (e.g. "reply to customer support email"). Hashed into the lease, so a lease acquired for one action cannot authorize a different one. |