| 1 | { |
| 2 | "description": "tool_call_before: a hook answers a JSON deny with a reason; the call is refused with that (sanitized) reason.", |
| 3 | "event": "tool_call_before", |
| 4 | "model": "deepseek-v4-pro", |
| 5 | "tool": { |
| 6 | "name": "Bash", |
| 7 | "call_id": "call_hook_bash", |
| 8 | "input": { |
| 9 | "command": "rm -rf build" |
| 10 | } |
| 11 | }, |
| 12 | "hooks": [ |
| 13 | { |
| 14 | "event": "tool_call_before", |
| 15 | "name": "policy", |
| 16 | "command": "{{capture}} policy; printf '%s' '{\"decision\":\"deny\",\"reason\":\"conformance policy blocks rm -rf\"}'" |
| 17 | } |
| 18 | ] |
| 19 | } |
| 20 |