AtlaSent — Evaluate Action
evaluateDetermine if a sensitive action is authorized before running it. Returns allow, deny, or hold to prevent unauthorized execution.
Instructions
Call this BEFORE performing any sensitive action. Returns a Decision: allow (verify the returned permit_token at the execution boundary before proceeding), deny (you MUST NOT proceed), or hold (do not proceed; route for review).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| actor_id | Yes | Identifier for the user or service account the agent is acting on behalf of. | |
| approvals | No | Approval identifiers already obtained for this action (e.g. ticket IDs, reviewer handles). | |
| action_type | Yes | Canon-backed action type (for example production.deploy, agent.tool.invoke, access.grant). Use atlasent_lookup_action to discover governed Action Types. | |
| environment | Yes | Target environment for the action (e.g. production, staging, development). | |
| change_window | No | ISO-8601 time window during which the change is permitted (e.g. 2025-01-15T02:00:00Z/PT4H). |