Runtime tool policy

Key features

• A tools/pre-execute waterfall classifies dangerous shell, SQL, and structured file-write arguments as deny, ask, or unchanged.
• Guardian inspects tool names, arguments, canonical results, and rendered output inside the current DSH process.
• standard, strict, and permissive profiles provide different approval levels while retaining non-negotiable deny rules.
• Custom regular-expression rules add deployment-specific deny or ask decisions.