Module guard 

Sync guard trait for portable evaluation.

This matches the legacy chio_kernel::Guard surface byte-for-byte so existing guard implementations can be lifted into the core with no behavioural change:

pub trait Guard: Send + Sync {
    fn name(&self) -> &str;
    fn evaluate(&self, ctx: &GuardContext) -> Result<Verdict, KernelCoreError>;
}

The error type is crate::evaluate::KernelCoreError instead of the legacy chio_kernel::KernelError because the full error enum carries std/tokio/sqlite-flavoured variants that are not portable. The legacy adapter in chio-kernel::kernel bridges the two.

Structs

GuardContext

Inputs a guard sees when it runs inside the core evaluate pipeline.

PortableToolCallRequest

Portable projection of an chio_kernel::runtime::ToolCallRequest.

Traits

Guard

Sync guard trait. Preserved signature-for-signature from legacy chio_kernel::Guard.