Block policy denials in reactor-gated tool middleware - #844

Merged

TheGreatAxios merged 6 commits into

mainfrom

cl-7530-gatetoolcall-middleware-bypass-under-reactorgated-is

Sep 10, 2026

Commits on Sep 9, 2026

Block policy denials in reactor-gated tool middleware
TheGreatAxios
committed
c35e388
Record each reactor-gated decision once
TheGreatAxios
committed
bf3a399
Assert two-pass reactor-gated denials record once
TheGreatAxios
committed
81a619b
Consume reactor-gated verdicts once at execution
TheGreatAxios
committed
606ded2
Key reactor-gated verdict cache by call identity
TheGreatAxios
committed
4b9a822
Assert reused call ids do not inherit allow across args
TheGreatAxios
committed
8246612