Runtime
A runtime can refuse only where it exclusively controls the tool or credential.
The HANRIA runtime is designed to check every action against your mandate before it happens, and to keep a receipt after.
- Your mandate is the rulebook.
- Designed so each action is allowed once, then recorded.
- Designed to hold the keys and tools itself so it can refuse.
Why it matters
Rules only protect you if they cannot be skipped. The runtime source is designed to stand between the agent and its tools. Its refusal could prevent an action only where it exclusively controls the credential or tool that can perform it.