pub fn evaluate(
effects: &EffectRow,
args: &mut Value,
mode: CapabilityGateMode,
now: i64,
) -> Result<GateOutcome, String>Expand description
Evaluate the capability gate for one dispatch.
Mutates args by removing the credential key when present (it must not
reach tool bodies or audit digests). Returns Err(reason) when a
presented credential is malformed or fails verification, or when strict
mode finds a requirement with no credential.