The tool that was approved.
The arguments the tool would be called with.
Ordered list of guardrail IDs to evaluate.
Optional callbacks: AgencyCallbacksOptional event callback map for emitting override events.
A result indicating whether the guardrails passed.
Runs post-approval guardrails against tool call arguments to catch destructive actions that slipped past the HITL handler.
This is the core safety net: even when auto-approve, LLM judge, or a human approves a tool call, the configured guardrails get a final say. If any guardrail returns
action: 'block', the approval is overridden.