> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hiroshios.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Tool Authorization

> Securely restricting agent capabilities and command execution.

To enforce strict security baselines, Hiroshi verifies tool calls against the agent's authorization matrix defined in `AGENTS.md`.

### Authorization Logic

* **Explicit lists**: Agents can only execute tools explicitly enumerated in their profile.
* **Allowed Binaries**: Shell executions are limited to programs matching lists in `allowed_binaries` (e.g. `cargo`, `git`, `python`).
* **Handoffs validation**: The router intercepts handoff syntax to prevent cross-agent privilege escalations.
