task scope derived

{
  "input": {
    "type": "http",
    "method": "GET",
    "queryParams": {
      "tool_registry": [
        {
          "name": "web_search",
          "description": "search the web, read only"
        },
        {
          "name": "usdc_send",
          "effects": [
            "transfer",
            "pay"
          ],
          "description": "transfer USDC to an address"
        }
      ],
      "task_description": "Search for open bounties, then send the payout to the winner"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "lane": "/task-scope",
      "warning": "NOT_A_SANDBOX — heuristic keyword/effect matching on declared registry entries, not containment of a lying tool.",
      "excluded": [
        {
          "tool": "file_write",
          "reason": "…",
          "effects": [
            "persistent_write"
          ]
        }
      ],
      "allowlist": [
        {
          "tool": "web_search",
          "phase": "discovery",
          "effect_class": "read_only",
          "justification": "…"
        }
      ],
      "description": "NOT A SANDBOX — task-scoped least-privilege tool allowlisting ($0.10): hand it the task description and tool registry, get the minimal allowlist with per-tool justification plus phase-change re-scoping guidance. Heuristic keyword/effect matching — a tool that hides its effects escapes the screen. Blast-radius control for honest agents, not containment.",
      "task_phases": [
        "discovery",
        "money"
      ],
      "tools_evaluated": 3,
      "rescope_triggers": [
        "…"
      ]
    }
  }
}