Check an action BEFORE you run it. Pass the exact command, SQL statement, or tool invocation you are about to execute.

Returns JSON with proceed (true/false). If proceed is false and decision is "blocked", the action is dangerous and a human must approve it out of band: tell the user to run infraveil-guard approve <action_id> in their own terminal, then call this tool again with the one-time approval_code they give you. You cannot approve your own action. Every decision is recorded in a local tamper-evident ledger.

action: the exact command/SQL/tool call about to run (required). approval_code: the one-time code a human produced via the CLI (optional).

Classify the blast radius of an action WITHOUT recording or gating it. Use this to reason about risk; use guard_action when you actually intend to run it. Returns risk (none/low/medium/high/critical), whether it is reversible, the specific dangerous capabilities found, and a recommendation.

action: the command/SQL/tool call to assess (required).

Verify the local guard ledger's hash chain - proves no decision has been edited, deleted, reordered, or inserted. Returns ok plus where any tampering was found. This is the 'trust by inspection' check; it reads only local files and trusts nothing remote.

Return the most recent guard decisions from the local ledger (newest first): what was allowed, blocked, or approved, with risk and timestamps.

limit: how many entries to return (1-500, default 20).