can_read
Determine why an agent can or cannot access a specific record. Returns allowed status, reason, and grant source for one ACL decision.
Instructions
Explain ONE access decision: {allowed, reason, via}. via is the grant record's id when access came
from a grant, "owner" when the agent wrote the record itself, and None on a denial. Use it to inspect an
ACL a record at a time instead of inferring it from what a recall did or did not return.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| agent | Yes |