Add policy-based filtering for tool calls - #1534

Open

aantn wants to merge 12 commits into

claude/rbac-tool-filtering-design-71Y5o

Commits on Jan 23, 2026

Add RBAC tool filtering design document
claude
committed
026ca63

Commits on Jan 26, 2026

Implement policy-based tool filtering using simpleeval
claude
committed
f458094

Commits on Jan 31, 2026

Refactor policy to use effect/when syntax
claude
committed
43985e0
Simplify policy to deny-only model
claude
committed
26a7ee1

Commits on Feb 3, 2026

Refactor policy to scoped validation model (Option B)
claude
committed
75bef4f
Remove outdated RBAC design document
claude
committed
b6e4083

Commits on Feb 4, 2026

Add default: deny option for whitelist mode
claude
committed
7254097
Require `when` field in policy rules, add documentation
claude
committed
c77abc2

Commits on Feb 9, 2026

Add bash conditions and update policy syntax to allow_if
claude
committed
e5cd2d2
Apply pre-commit formatting fixes
claude
committed
abc2b23
Add HTTP helper functions for API-based policy checks
claude
committed
90a803f

Commits on Feb 17, 2026

Add rate limiting for policy rules
claude
committed
16e86fa