{
  "version": "v1.0",
  "document_role": "tool_execution_authority",
  "execution_modes": [
    "dry_run",
    "validated_execution"
  ],
  "rules": [
    "tool_requires_permission",
    "tool_requires_scope",
    "tool_requires_validation",
    "tool_must_emit_audit"
  ],
  "forbidden": [
    "direct_execution_without_validation",
    "unscoped_tool_usage",
    "privileged_action_without_trace"
  ],
  "canon_meta": {
    "canon_id": "devon-tool-execution-canonical",
    "version": "2.0.0",
    "status": "ACTIVE",
    "master_authority": "master_architecture_index.md",
    "preserve_original_content": true,
    "canonical_layer_key": "memory_layer",
    "phase_origin": [
      "phase-08"
    ],
    "installation_order": 120,
    "primary_stage": "engineering_modules"
  },
  "governance_reference": {
    "master_authority": "master_architecture_index.md",
    "primary_axis": "canonical_layer",
    "secondary_axis": "deployment_order",
    "preserve_phase_registry": true,
    "preserve_original_content": true
  },
  "canonical_layer_key": "memory_layer",
  "phase_origin": [
    "phase-08"
  ],
  "installation_order": 120,
  "primary_stage": "engineering_modules",
  "canonical_position": {
    "canonical_layer_key": "memory_layer",
    "phase_origin": [
      "phase-08"
    ],
    "installation_order": 120,
    "primary_stage": "engineering_modules"
  },
  "id": "tool_execution",
  "label": "Tool Execution Canonical",
  "phase": "phase-08",
  "category": "memory_learning_reasoning",
  "status": "ACTIVE_DH_MIRROR",
  "purpose": "Define how DEVON-DEV executes tools only after plan, permission, evidence and safety gates are satisfied.",
  "function": "Bind tool calls, shell execution, file operations, scans, tests and patches to governed inputs, expected outputs, rollback state and audit evidence.",
  "technology_requirements": [
    {
      "technology": "Tool Execution Controller",
      "required_for": "Define how DEVON-DEV executes tools only after plan, permission, evidence and safety gates are satisfied.",
      "required_by_phase": "phase-08",
      "required_by_category": "tool_execution",
      "required_by_buckets": [
        "Prerequisites",
        "Installation",
        "Configuration",
        "Validation",
        "Observable Evidence",
        "Failure Modes & Recovery",
        "Completion & Promotion"
      ],
      "expected_version": "MISSING until Tool Execution Controller is implemented and connected to the Execution & Monitoring Panel",
      "validation_command": "MISSING until tool_execution can prove source, scope, status, evidence and decision linkage",
      "evidence_path": "/home/yeff/public_html/devon/canon/execution/state/dh_sources/tool_execution_canonical.json",
      "status_source": "Documentation Hub + future Execution & Monitoring Panel",
      "blocking_if_missing": true,
      "failure_impact": "Without Tool Execution Controller, DEVON-DEV cannot bind tool use to plan, scope, evidence and rollback."
    }
  ],
  "depends_on": [
    "sec",
    "memory_arch",
    "knowledge_ingestion",
    "knowledge_versioning",
    "memory_lifecycle",
    "learning_gov"
  ],
  "used_by": [
    "future_execution_monitoring_panel",
    "planning_reasoning",
    "tool_execution"
  ]
}