Workflow Sentinel
workflow_sentinelRead-only
Assess pre-action workflow risk, blast radius, and receive remediation guidance to block harmful tool executions.
Instructions
Predict pre-action workflow risk, blast radius, and remediations before a tool call executes.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| toolName | No | Tool being assessed, such as Bash, Edit, or Write. Optional when provider-native tool call payload is supplied. | |
| provider | No | Optional provider name, such as anthropic, openai, codex, cursor, gemini, or mcp | |
| model | No | Optional model name used for audit evidence and budget review | |
| providerToolCall | No | Provider-native tool call object, including Anthropic tool_use or OpenAI function/tool call shapes | |
| content | No | Provider-native message content blocks; Anthropic tool_use blocks are normalized automatically | |
| method | No | Optional JSON-RPC/MCP method, such as tools/call | |
| params | No | Optional JSON-RPC/MCP params, including tools/call name and arguments, resources/read URI, or prompts/get template arguments | |
| usage | No | Provider token/cost usage, such as input_tokens, output_tokens, or total_tokens | |
| tokenEstimate | No | Estimated total tokens for this action when provider usage is unavailable | |
| costUsd | No | Estimated USD cost for this action when provider usage is unavailable | |
| budget | No | Optional per-action budget controls: maxTokensPerAction, remainingTokens, maxCostUsdPerAction, remainingCostUsd, maxParallelBranches | |
| workflowPattern | No | Optional workflow architecture hint. Agents require inspection evidence; predefined workflows are easier to evaluate. | |
| workflow | No | Optional workflow metadata: pattern, steps, routes, branches, tools, inspection, and verification evidence. | |
| goal | No | Optional agent goal for open-ended tool planning. | |
| tools | No | Optional abstract/combinable tool names available to an open-ended agent. | |
| branches | No | Optional parallel workflow branches for fan-out budget and review checks. | |
| steps | No | Optional predefined workflow steps for chaining/evaluator workflow audit evidence. | |
| routes | No | Optional routing workflow destinations or classes. | |
| command | No | Optional shell command when toolName is Bash | |
| filePath | No | Optional primary file path for edit-like tools | |
| changedFiles | No | Optional affected-file list used to estimate blast radius | |
| repoPath | No | Optional repository path used for git-aware integrity checks | |
| baseBranch | No | Optional protected base branch override (defaults to main) | |
| requirePrForReleaseSensitive | No | When true, release-sensitive changes on non-base branches require an open PR | |
| requireVersionNotBehindBase | No | When true, release-sensitive changes cannot lag behind the base branch package version |