feat: implement ValidateCall gRPC endpoint (#65) #163

Merged
shahondin1624 merged 1 commits from feature/issue-65-validate-call-endpoint into main 2026-03-10 16:47:56 +01:00

Summary

  • Implement ValidateCall dry-run endpoint that runs the 5-layer enforcement pipeline without executing the tool
  • Reuses existing enforce() method by constructing an ExecuteToolRequest from ValidateCallRequest
  • Returns is_allowed, denial_reason, and enforcement_layer
  • 6 new tests covering allowed, denied, path checks, no side effects, and unknown agent type

Test plan

  • All 165 tool-broker tests pass
  • Clippy clean with -D warnings
  • Validates no side effects (10 repeated calls don't trigger loop detector)

Closes #65

## Summary - Implement ValidateCall dry-run endpoint that runs the 5-layer enforcement pipeline without executing the tool - Reuses existing `enforce()` method by constructing an ExecuteToolRequest from ValidateCallRequest - Returns is_allowed, denial_reason, and enforcement_layer - 6 new tests covering allowed, denied, path checks, no side effects, and unknown agent type ## Test plan - [x] All 165 tool-broker tests pass - [x] Clippy clean with `-D warnings` - [x] Validates no side effects (10 repeated calls don't trigger loop detector) Closes #65
shahondin1624 added 1 commit 2026-03-10 16:47:51 +01:00
Wire the ValidateCall dry-run endpoint that runs the 5-layer
enforcement pipeline without executing the tool. Reuses the
existing enforce() method by constructing an ExecuteToolRequest
from the ValidateCallRequest. Returns is_allowed, denial_reason,
and enforcement_layer. 6 new tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
shahondin1624 merged commit 8965e849ae into main 2026-03-10 16:47:56 +01:00
shahondin1624 deleted branch feature/issue-65-validate-call-endpoint 2026-03-10 16:47:56 +01:00
Sign in to join this conversation.