IMentorActionPolicy interface

Decides, in the application's own code, whether a user may use one of its actions at all, and whether one call may run: a permission per company or per record, a rule on the arguments, a check against the application's data. For the application's actions only, on every surface: the coordinator's, a specialist's, a team member's, an agent source's, the tools of the MCP servers the application consumes, and the MCP server it serves. Never for MentorAgent's own tools (navigate_to, remember, forget_all, load_skill, read_skill_resource, route_to_specialist, a team's tool, invoke_ui_action).

Register it with AddMentorActionPolicy<T>(), or as a singleton IMentorActionPolicy of your own; every policy registered is asked, in the order of registration. It is a singleton: what it needs from the conversation's scope it resolves from MentorActionRequest.Services.

A call is decided in this order: the roles of the action, IMentorActionPolicy.IsAllowedAsync, IMentorActionPolicy.BeforeActionAsync, the confirmation, then the action. A policy that does not answer within MentorOptions.ActionPolicyTimeout, or throws, stops the call; when MentorAgent decides what to offer, it leaves the action out. Its exception's message is never logged, only its type.

Both methods have a default body, so a policy writes only the one it needs. A member added to this interface in a later version comes with a default implementation.

Namespace: Novior.MentorAgent.Abstractions.Interfaces. Package: Novior.MentorAgent.Abstractions.

public interface IMentorActionPolicy

dotnet add package Novior.MentorAgent.Abstractions

ValueTask<MentorActionVerdict> BeforeActionAsync(MentorActionRequest request, CancellationToken cancellationToken)

Before every call, once the roles and IMentorActionPolicy.IsAllowedAsync have let it through, and before the confirmation: MentorActionVerdict.Proceed has no objection, MentorActionVerdict.Confirm asks the user first, MentorActionVerdict.Stop stops the call with a reason the model reads. Every policy is asked, and the strictest answer wins: Stop, then Confirm, then Proceed. Proceed never removes a confirmation the action asks for. Where nobody can confirm — the MCP server, a task from another agent — Confirm refuses the call.

Parameters

• request: The call: the action, its arguments, the user, and where it comes from.
• cancellationToken: Cancelled when the policy takes longer than ActionPolicyTimeout, and with the turn.

ValueTask<bool> IsAllowedAsync(MentorActionRequest request, CancellationToken cancellationToken)

Whether this user may use this action at all. Asked when MentorAgent decides what to offer — the coordinator's tools for a turn, the MCP server's tools/list — with MentorActionRequest.StageMentorActionStage.Offer and no arguments; and before every call, with MentorActionStage.Call and the arguments, again after the user confirmed. false: the action is not offered, and a call to it does not run. Asked for every action offered on every turn: keep it fast, for example with a cache per user.

Parameters

• request: The action, the user, and where the call comes from.
• cancellationToken: Cancelled when the policy takes longer than ActionPolicyTimeout, and with the turn.