A gate for a host that builds the engine itself. ToolOrchestrator does
not use this: its gate runs each step through processToolCall.
Built with resolve alone, the gate runs a step by calling the tool: no
permission check and no approval, as a direct call has in a host with
neither manager. The chainability rule is applied by the builder either way.
A step whose signal has aborted by the time its checks pass is refused
(step_aborted) before its approval is asked; one whose signal aborts while
its approval is pending is refused after it. Nothing runs either way.
A gate for a host that builds the engine itself.
ToolOrchestratordoes not use this: its gate runs each step throughprocessToolCall.Built with
resolvealone, the gate runs a step by calling the tool: no permission check and no approval, as a direct call has in a host with neither manager. The chainability rule is applied by the builder either way. A step whosesignalhas aborted by the time its checks pass is refused (step_aborted) before its approval is asked; one whose signal aborts while its approval is pending is refused after it. Nothing runs either way.