gia_apply_pack
Destructive
Execute remediation or hardening packs with mandatory human approval after verifying the inputs hash from a dry-run to enforce what-you-approved-is-what-ran.
Instructions
Execute a remediation or hardening pack with MANDATORY gate approval. Requires inputsHash from gia_dry_run_pack (what-you-approved-is-what-ran binding). REJECTS patrol/audit packs (use gia_run_patrol for those). Hardening packs run preflight checks before execution. Classification: MANDATORY — human approval required.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"pack_id": "<pack_id>",
"approved_by": "<approved_by>",
"inputs_hash": "<inputs_hash>"
},
"name": "gia_apply_pack"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pack_id | Yes | Remediation or hardening pack ID to execute | |
| approved_by | Yes | Human approver identity (from authenticated session). BLOCKED: system, auto, agent, bot, ai | |
| approver_role | No | Role of the approver (isso, platform-owner) | isso |
| inputs_hash | Yes | inputsHash from gia_dry_run_pack — ensures what-you-approved-is-what-ran | |
| tenant_id | No | Tenant ID for token binding | ace-platform |
| variable_overrides | No | Same variable overrides used in dry-run | |
| incident_id | No | Link to existing SRT incident |