Module guard 

Pure-function policy evaluation. Mirrors guard.ts / guard.py.

Functions

can_call

True iff the session’s verification state satisfies the policy.

consume_policy

Called after a protected tool call completes. Consumes the fresh-verification ticket for EachCall; no-op for other policies.

mark_verified

Called only when the submit step succeeds. Replenishes session state.