governance

type OutputRedaction struct {
	RunID  string
	StepID string
	Kind   string
	Data   json.RawMessage
}

type OutputRedactor interface {
	RedactOutput(ctx context.Context, output OutputRedaction) (json.RawMessage, error)
}

type OutputRedactorFunc func(ctx context.Context, output OutputRedaction) (json.RawMessage, error)

type ToolInvocation struct {
	RunID      string
	Agent      string
	Tool       string
	SideEffect core.SideEffectLevel
	Input      json.RawMessage
	// CallCount is the number of prior successful invocations of this tool
	// name in the current autonomous tool loop (used by RateCap and per-tool budgets).
	CallCount int
	// SameInputCalls is the number of prior attempts (success, failure, or
	// governance denial) with the same tool name and canonical input in the
	// current autonomous tool loop. Loop-guard policies should use this field.
	SameInputCalls int
	TotalCalls     int
	Metadata       map[string]string
}

type ToolPolicy interface {
	AuthorizeTool(ctx context.Context, invocation ToolInvocation) error
}

type ToolPolicyFunc func(ctx context.Context, invocation ToolInvocation) error