Contextual Risk for Agent Tool Calls: A 4-State Permission Engine Field-Tested Across 10 Frameworks
TLDR: I built a permission engine for AI agents that decides allow/audit/escalate/deny based on context — not binary allow-lists. 10 framework adapters, 83 real agents, 2,490 deterministic tests, 206