openWorldToolFloorReason
openWorldToolFloorReason(
annotations):string|null
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/core/shell/rater.ts:1777
EXT-70 (§4.7.2, §4.7.3) — the tool arm of the open-world floor: the reason a call whose
EFFECTIVE openWorldHint is true is floored at destructive, or null when it is not.
It sits beside preflightFloorReason because it is the same rule seen from the other side.
§4.6 floors a shell fetch before any model call precisely so that no misreading of a hostname can
auto-approve; the same fetch reached through a tool instead of through curl must not be
ungated, or the preflight is a rule about spelling rather than about fetching. Both feed
applyDestructiveFloor.
Independent of readOnlyHint, and that is the whole of §4.7.3. A fetch tool is read-only in
the local sense — it mutates nothing on this machine — while reaching the network; the two facts
are unrelated, and gth_web_fetch (readOnlyHint: true, openWorldHint: true) is the case that
proves it. destructiveHint is not consulted either: §4.7.2 lets it only ever RAISE, so a
destructiveHint: false can never lower a floor this rule set. idempotentHint has no built-in
consumer at all — do not invent one here.
Parameters
Section titled “Parameters”annotations
Section titled “annotations”EffectiveToolAnnotations | undefined
The call’s effective set (§4.7.1), never its declared one — trust has already
been applied, so an untrusted server’s openWorldHint: false has already collapsed to the
fail-closed true by the time it arrives. undefined (a source that cannot decide) floors, in
the same direction as the fail-closed default it would otherwise have returned.
Returns
Section titled “Returns”string | null