Context

Enforce tool authorization before every tool invocation per spec 11.2. Different agents have different access levels, and the permission system ensures agents can only use tools appropriate to their role and trust level.

Acceptance Criteria

• Permission check executed before every tool invocation
• Access levels implemented: sandboxed, restricted, standard, elevated, custom
• Access level determines which tools are available to an agent
• Agent-specific allowed/denied tool lists enforced
• Clear denial messages explaining why a tool is not available
• Fast permission checks (no LLM calls, pure config-based logic)
• Unit tests for all access levels
• Unit tests for allowed/denied list enforcement
• Integration with tool registry from Implement hierarchical delegation (task flows down, results flow up) #12

Dependencies

• Depends on Implement hierarchical delegation (task flows down, results flow up) #12 (basic tool system)

Design Spec Reference

Section 11.2 — Tool Access Control