KB Gate Check
kb_gate_checkCheck pending code actions against governance rules to return an allow or consult_required verdict before execution.
Instructions
Return a verdict (allow | consult_required) for a pending code action.
Governed actions require a fresh consultation on record. Records each
check to the audit log (non-destructive; readOnlyHint=false is
intentional). Use this in a PreToolUse hook to verify a specific pending
action before execution; use kb_consult instead when proactively
reading governing rules at the start of a session rather than checking
individual actions.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool_name | Yes | Name of the tool or command about to run. | |
| workspace | Yes | Project or workspace key in the KB. | |
| session_id | Yes | Agent session id checked against consult history. | |
| action_diff | No | Short description or diff summary of the pending action. | |
| action_path | No | Optional path or URL affected by the pending action. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||