Namespace Oscova.Agents.Policies

AgentToolPolicy: Stores an agent-specific governance override for one qualified tool name.
ConfidentialAgentOnlyAttribute: Marks reflected tools that are available only to confidential agents.
ConfidentialToolPolicy: Evaluates reflected tool confidentiality markers at runtime.
EgressClassifier: Classifies provider endpoints and arbitrary URIs as local/LAN or public-cloud egress.
NonConfidentialAgentOnlyAttribute: Marks reflected tools that are available only to non-confidential agents.
ProviderEgressDescriptor: A by-value record of one agent run's resolved model provider and egress class.
ToolNetworkScopeAttribute: Declares a reflected tool method's relationship to the network for offline-mode enforcement.
ToolPolicyAttribute: Declares the default governance policy for a reflected tool method.
ToolPolicyResolver: Resolves sparse per-agent tool policy overrides by qualified tool name.
ToolReferenceSanitizationResult: Reports stale tool references removed from an agent or task runtime surface.
ToolReferenceSanitizer: Removes stale tool identifiers from persisted agent and task runtime surfaces.

EgressClass: Whether a resolved endpoint stays local or reaches public-cloud infrastructure.
NetworkScope: Describes how a tool relates to the network, used to enforce offline mode.
ToolApprovalMode: Describes how an agent exposes a selected tool at runtime.
ToolApprovalRunMode: Controls how approval-required tool calls are handled for one run.