Module agentforge4j.runtime

Package com.agentforge4j.runtime.tool

Class SecureDefaultToolPolicy

java.lang.Object

com.agentforge4j.runtime.tool.SecureDefaultToolPolicy

All Implemented Interfaces:

ToolPolicy

public final class SecureDefaultToolPolicy
extends Object
implements ToolPolicy

Secure-by-default OSS ToolPolicy: allows in-process tools (the embedder's own registered code) and denies remote-network and local-process tools, which require an explicit trust decision (ToolPolicy.allowAll() or a custom policy). The decision is made solely on the framework-trusted ToolSourceKind; it does not consult provider-declared ToolRiskMetadata, which is untrusted advisory metadata and plays no part in this default policy's allow decision.

Dangerous classes are denied, not suspended for approval, so an embedder that has not wired an approval handler is never stranded.

Constructor Summary

Constructors

Constructor	Description
SecureDefaultToolPolicy()

Method Summary

Modifier and Type	Method	Description
PolicyDecision	evaluate(ToolInvocationCommand cmd, ToolDescriptor descriptor, ToolInvocationContext ctx)	Evaluates a requested tool invocation.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SecureDefaultToolPolicy

public SecureDefaultToolPolicy()

Method Details

evaluate

public PolicyDecision evaluate(ToolInvocationCommand cmd,
 ToolDescriptor descriptor,
 ToolInvocationContext ctx)

Description copied from interface: ToolPolicy

Evaluates a requested tool invocation. Argument-schema validation runs in the execution service before this is consulted, so implementations receive arguments already shape-checked against ToolDescriptor.inputSchema().

Specified by:

evaluate in interface ToolPolicy

Parameters:

cmd - the requested invocation

descriptor - the resolved tool descriptor

ctx - invocation context

Returns:

the policy decision