Ë dÈjÑ ãób—dZddlmZddlmZmZmZddlmZGd„de«Z d d„Z y ) upv3.6 Runtime Harness — guard engine (evaluate orchestrator). chair_authorization_id=CHAIR-AUTH-TASK-2703-V36-HARNESS-MVP-260528 Public API: evaluate(tool_name, tool_input, context) -> Decision Decision TypedDict: decision: "ALLOW" | "DENY" | "HOLD_FOR_CHAIR" matched_rule: str | None (None for ALLOW) reason: str | None (None for ALLOW) é)Ú annotations)ÚAnyÚ TypedDictÚOptionalé)Ú ALL_RULEScó,—eZdZUded<ded<ded<y)ÚDecisionÚstrÚdecisionz Optional[str]Ú matched_ruleÚreasonN)Ú__name__Ú __module__Ú __qualname__Ú__annotations__©óú0/home/jay/workspace/scripts/harness/v36/guard.pyr r s…؃MØÓØ Ôrr cój— t|xsd«}t|t«r t|«ni}t|t«r t|«ni}tD]%} ||||«}|€Œ|\}} } t || | ¬«cSt ddd¬«S#t$rd}YŒ5wxYw#t$rt ddd¬«cYSwxYw)u½Evaluate a tool call against all v36 harness rules. Args: tool_name: Name of the Claude Code tool (e.g. "Bash", "Write", "Edit"). tool_input: The tool's input dict as received from the hook stdin. context: Additional context dict (task_id, session_id, new_code_files, etc.) Returns: Decision dict with decision, matched_rule, reason. Contract: - First matched rule wins (ordered by ALL_RULES list). - No match → ALLOW with matched_rule=None, reason=None. - Any exception in a rule → that rule returns None (rules are fail-safe). - The evaluate function itself is also fail-safe: any unhandled exception → ALLOW. ÚN)r r rÚALLOW)r Ú isinstanceÚdictrÚ Exceptionr ) Ú tool_nameÚ tool_inputÚcontextÚ tool_name_strÚtool_input_dictÚ context_dictÚrule_fnÚresultr r rs rÚevaluater$sÔ€ð*JܘIšO¨Ó,ˆ Ü.8¸ÄTÔ.Jœ$˜zÔ*ÐPRˆÜ(2°7¼DÔ(A”t˜G”}Àrˆ ä ò ˆGð Ù  °ÀÓNð Ñ!Ø17Ñ.˜,¨ÜØ%Ø!-Ø!ôòð ô  °tÀDÔIÐIøôò à’ð ûô òJä °tÀDÔIÒIðJúsB‚ABÁ BÁBÁ"BÁ8B BÂBÂBÂBÂB2Â1B2N)rrrrrrÚreturnr ) Ú__doc__Ú __future__rÚtypingrrrÚrulesrr r$rrrúr*sRðñ õ#ç+Ñ+åôˆyôð .JØð.Jàð.Jðð.Jðô .Jr