Tool Catalog Scoping¶

Declare host tools in the ACS manifest and bind tool-call policies with tool_name_from. Unknown tools fail closed.

See Rego and Cedar in ACS.