wm_govern
Check whether an AI action is allowed under workspace policy without executing it. Unknown actions are denied by default, and sensitive actions can require human approval.
Instructions
Check whether an AI action is allowed by the workspace policy without performing it. Unknown actions are denied by default. Write actions can require a preview, and sensitive actions can require a named human approver. The decision is recorded in the hash-chained journal.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| paths | No | ||
| action | Yes | Action to check: read, write, execute, delete or network. | |
| preview | No | ||
| approver | No |