The firewall for agent tool calls.

Demo gate. Production-grade policy engine comes later. Today: watch an agent get told NO.

CALLS / LIVE LIVE

No calls yet. Run a scenario.

REF / 04 RULES read-only in demo

evaluated in file order — first match wins

TOOLARGSAUTHDECISION

SYNTHETIC TRAP TOOL

read_file / write_file / exec — demo only

SYNTHETIC DEMO TOOL — performs no real actions. Calls never reach a real MCP server.

SCENARIOS / DEMO MCP-style envelope — simplified for demo

IDLE — awaiting calls

TOTAL0

ALLOWED0

DENIED0

QUARANTINED0