validate_token
Authorizes a real action by validating a single-use token, rejecting expired, reused, or mismatched tokens, and burning the token on success.
Instructions
The executor calls this to authorize a real action. Rejects any token that is unknown, expired (>60s), already used, or bound to a different action_type / artifact / targets. On success the token is burned (single use) and the execution is fossiled.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | ||
| targets | Yes | ||
| artifact | Yes | ||
| action_type | Yes |