ToolPermit
A Python gate. The command runs only when the policy allows it, and a denial gives the reason.
Type
Tech stack
Documentation
Basic
A README with setup and run steps.
Maintenance
None
Sold as-is. No further updates from the Builder.
Description
ToolPermit — An Explicit Allow/Deny Gate for Python Actions
ToolPermit is a Python gate that controls whether a named action can execute. The action runs only when the policy allows it. A denied action returns a reason without starting the work.
No default allow. The policy must explicitly list permitted actions. Any action outside that list is denied. Forbidden actions are always denied, even if the same name also appears in the allowed list.
Quick start
Unpack the ZIP and run:
python toolpermit.py --policy sample/policy.json --action read_health -- python -c "print('ran')"
When an action is forbidden, ToolPermit prints the denial reason and does not run the command.
The enforcement path
The library entry point is Gate.run. Actions must pass through this gate for the policy to enforce their allow/deny decision. Code that bypasses the gate is outside its control.
What's included
- Python source code
- Sample policy
- Automated tests
- Python 3.12; standard library only
- No installation or third-party dependencies
Copyright © 2026 Martin Gettig. No support, hosting, or updates are included.
ToolPermit is built from code developed for the Voxryn FREE runtime and is sold under its own license. This purchase does not include the FREE runtime.
FAQ
- Can the check be skipped?
- Gate.run and the command line are the enforcement path. The command is started only after the policy allows the action. Calling decide and then running the tool yourself steps around the gate.
- What if an action is both allowed and forbidden?
- Forbidden wins. The command is not started, and the reason is forbidden.
Domains
Seller
Reviews
No reviews yet.