Baseline estate posture — routine drift, no active major incident.
6 agents streaming

Tool Governance Catalog

Only registered tools can be invoked through the gateway. Each carries a pinned version, an explicit caller list, an approval status and a reapproval date.

APPROVEDget_customer_invoicev2.4.1

Returns a single invoice for one customer id and one invoice period. Read-only, row-scoped, no free-form query surface.

Narrow contract: two typed parameters, one row returned, PII fields masked at the gateway.

BANNEDexecute_sql

Arbitrary SQL execution against the core datastore. Unbounded blast radius, no parameter contract, unauditable intent.

Banned by policy TOOL-DENY-001. Generic execution surfaces cannot be scoped, versioned or reviewed.

Registered tools

Click any row for its full governance record

ToolBackend systemZoneApprovalVersionLast reapprovalCallers
get_customer_invoiceBilling Systemconfidentialapprovedv2.4.12026-07-144
execute_sqlCustomer Databaserestrictedbannednever approved0
lookup_customerCRM Platforminternalapprovedv3.1.02026-08-025
open_service_ticketService Deskinternalapprovedv1.9.32026-06-303
issue_refundBilling Systemconfidentialapprovedv1.2.02026-08-212
query_network_statusNetwork Operationsinternalapprovedv4.0.22026-07-283
reset_subscriber_sessionNetwork Operationsconfidentialapprovedv2.0.52026-05-192
export_customer_tableCustomer Databaserestrictedpendingv0.9.0-rc1under review since 2026-08-300
update_account_planCRM Platformconfidentialapprovedv2.2.02026-08-112
verify_identity_claimIdentity Storerestrictedapprovedv1.5.42026-07-021

Catalog activity

Latest tool invocations across the estate

No invocations yet

Catalog is synthetic · no live systems or PII