guglxni

Microsoft-Decision-1 (Azure AI Foundry System One) decision provider for bounded agent decisions. Registers typed-decision tools (decision_noul, decision_choice, decision_score, decide) that preserve full probability distributions, plus an opt-in pre_tool_call hook that requests human approval for known-risk calls without sending their arguments to Azure. Reference implementation of the typed decision-provider runtime in #113008. Disclosure — the four decision tools send the caller-supplied state/questions text to the Azure Foundry endpoint you set in AZURE_FOUNDRY_BASE_URL (nothing is sent while it is unset); with MS_DECISION_GATE=1 the pre_tool_call gate sends only a coarse operation label for known-risk tool calls to that endpoint and routes them to Hermes's human approval prompt (MS_DECISION_GATE_MODE=block hard-denies instead); the labelled eval corpus under tests/ contains literal destructive commands as should-refuse examples.