gate_decision
Returns ALLOW, DENY, or ESCALATE with risk reasons for routed agent actions; commit mints a signed receipt, while preview does not act.
Instructions
Two-phase decision gate with a real verdict. PREVIEW returns ALLOW, DENY or ESCALATE with the risk tier and reasons, plus a preview_id, without acting. COMMIT re-evaluates the same inputs and mints a signed receipt for the verdict. Only ALLOW returns a GRANTED permit; DENY returns DENIED; ESCALATE returns WITHHELD_PENDING_HUMAN and a human must decide outside this tool. Applies only to actions the caller routes through it: it does not observe or block what an agent does. Verb-tier heuristic on the action name and resource, not a proof. Stateless. Optional attestation: triggered_by_type, triggered_by_source, decision_model.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| phase | No | PREVIEW | |
| action | Yes | ||
| context | Yes | ||
| resource | Yes | ||
| preview_id | No | ||
| decision_model | No | ||
| triggered_by_type | No | ||
| triggered_by_source | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |