Module decide 

The guard arbiter.

decide is the single decision point the armed PreToolUse hook consults: given a tool call and the on-disk guard marker, it allows or denies. Writes outside every allowed root and un-scoped Bash mutations are denied; everything else — all read tools, and the orchestrator’s own in-sandbox writes — is allowed. When the guard is not armed, every call is allowed.

Structs

GuardDecision

The outcome of decide: allow, or deny with a human-readable reason.

GuardMarker

The staged marker file that arms the guard. The guard is a no-op unless this file exists, is active, and has not expired — so a crashed run that never tore the hook down can’t silently block writes in the user’s next interactive session.

Functions

decide

Decide whether a tool call should be allowed while the eval guard is armed.