Function: evaluateFsAllowOnlyGuard()

function evaluateFsAllowOnlyGuard(
   node, 
   input, 
   _ctx
): PolicyGuardEvaluationResult;

Defined in: fs/src/executors/fs-path-guard-executors.ts:86

Evaluates an FsAllowOnlyGuardNode (fs:allow-only) against proposed tool effects (SPEC.md §4.3).

Rejects any write mutation whose path does not match node.globs (or input.activeLeases).

Parameters

Parameter	Type	Description
node	FsAllowOnlyGuardNode	Allow-only guard AST node.
input	PolicyGuardEvaluationInput	Tool name, proposed effects, and active leases.
_ctx	StepExecutionContext<unknown>	Step execution context.

Returns

PolicyGuardEvaluationResult

Guard evaluation result and projected violatedEffects.