chio check

Evaluate one tool call against a policy and print the verdict, with no subprocess and no call to the tool.

On this page

Evaluate a single tool call against a policy (no subprocess).

Usage

Command synopsistext

chio check [OPTIONS] --policy <POLICY> --tool <TOOL>

--policy <POLICY> Path to the policy YAML file. Required.
--mode <MODE> Evaluation mode. Preflight checks only policies that do not need tool output. Default preflight. Values preflight, full.
--tool <TOOL> Tool name to evaluate. Required.
--params <PARAMS> Tool parameters as a JSON string. Default {}.
--server <SERVER> Server ID to use for the evaluation. Default *.
--output-fixture <JSON> JSON value returned by the fixture-backed tool server in full mode.

Example from the first-call project

Run from the first-call example project. For evidence verification, first export the evidence package.

reading-policy · allowtranscript

$ chio --receipt-db .chio/receipts.db --session-db .chio/session.db check \
  --policy ./policy.yaml --server hello --tool hello_world --params '{"name":"Chio"}'

verdict:    ALLOW
tool:       hello_world
server:     hello
receipt_id: 7fb5b33114af52bd96bf65a7c38e07437bad84580b1f203e11698acc3081374f
policy:     69e943b96e9ce64d0264bb56bf8930e77bd4e68adf68fcf1395790dae03e6b55
source:     0d35135e8b19230b7aa42b0cc5982579450f5dc4a0280822e8b339e7786d2296
mode:       preflight
fixture:    false

exit 0allowin my-agent