pub fn evaluate_tool_request(
policy: &ToolPolicySet,
request: &ToolRequest,
) -> PolicyVerdictExpand description
Evaluate a ToolRequest against a ToolPolicySet.
Rules are checked in order. The first rule whose (role, capability) pair matches determines the verdict. If no rule matches, the request is denied (default-deny posture).