Permission Guard

Set fine-grained boundaries for agent actions: • Whitelist specific directories for file operations • Block network calls to sensitive domains • Require confirmation before destructive operations • Log all tool invocations with their arguments Rules are defined in a simple TOML config and hot-reloaded.