promptdojo_

The tool contract — make the dangerous call a validation error — step 5 of 7

This tool registry shipped in a Friday PR. Over the weekend the agent reran jobs 31 times — including a deploy job, twice — and no confirm gate ever fired, because rerun_job is registered as if it were read-only.

Fix the registry so an unconfirmed rerun is rejected. Don't touch the validator — the bug is in the contract, not the enforcement.

Expected output:

rerun unconfirmed reject: needs confirm
rerun confirmed   ok
log read          ok
The break is on line 3 — but read the whole snippet first.

full-screen editor opens — close anytime to keep reading.