Run your first guarded action

​

1. Create a bounded agent

Create or import an agent named guarded-demo. Allow read_proofs, deny send_message, and require human approval for irreversible actions.

​

2. Load current permissions

npx -y @proofable/sdk mount guarded-demo --apply <host>

​

3. Evaluate before the tool call

import fs from 'node:fs';
import { evaluateRuntimeAction } from '@proofable/sdk/runtime-mount';

const bundle = JSON.parse(fs.readFileSync('.proofable/mount.json', 'utf8'));
const decision = evaluateRuntimeAction(bundle, 'send_message', {
  irreversible: true,
});

if (!decision.allowed) {
  throw new Error(`${decision.code}: ${decision.message}`);
}

await sendMessage();

{
  "decision": "denied",
  "allowed": false,
  "action": "send_message",
  "code": "ACTION_DENIED"
}

​

Decision order

1. Require a valid runtime mount and an unexpired mounted permission.
2. Apply deniedActions.
3. Require an explicit, non-empty allowedActions list for delegated authority, then check the action against it. Controller-owned mounts do not require a delegation allowlist.
4. Require approval for an irreversible action when configured.
5. Allow the host tool call.